--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162"}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7198edc557c3b3c3856259579d517af3d3369360c80f1e7b768e881f8cdab068"}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162"}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1179a8b21b18530fd8daeaf390684b31a1fee5c7ef7b65f23c8aa45030f96d3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1179a8b21b18530fd8daeaf390684b31a1fee5c7ef7b65f23c8aa45030f96d3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162"}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1179a8b21b18530fd8daeaf390684b31a1fee5c7ef7b65f23c8aa45030f96d3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1179a8b21b18530fd8daeaf390684b31a1fee5c7ef7b65f23c8aa45030f96d3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1179a8b21b18530fd8daeaf390684b31a1fee5c7ef7b65f23c8aa45030f96d3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1179a8b21b18530fd8daeaf390684b31a1fee5c7ef7b65f23c8aa45030f96d3b"}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1179a8b21b18530fd8daeaf390684b31a1fee5c7ef7b65f23c8aa45030f96d3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1179a8b21b18530fd8daeaf390684b31a1fee5c7ef7b65f23c8aa45030f96d3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1179a8b21b18530fd8daeaf390684b31a1fee5c7ef7b65f23c8aa45030f96d3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1179a8b21b18530fd8daeaf390684b31a1fee5c7ef7b65f23c8aa45030f96d3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162"}
{"level":"info","ts":"2026-07-14T01:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1179a8b21b18530fd8daeaf390684b31a1fee5c7ef7b65f23c8aa45030f96d3b"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd3231b839c6cf7ebd671d696bf7f6aecfcf4282d4c4dfa787c05454d1e84a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b"}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd3231b839c6cf7ebd671d696bf7f6aecfcf4282d4c4dfa787c05454d1e84a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd3231b839c6cf7ebd671d696bf7f6aecfcf4282d4c4dfa787c05454d1e84a9"}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bd3231b839c6cf7ebd671d696bf7f6aecfcf4282d4c4dfa787c05454d1e84a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bd3231b839c6cf7ebd671d696bf7f6aecfcf4282d4c4dfa787c05454d1e84a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bd3231b839c6cf7ebd671d696bf7f6aecfcf4282d4c4dfa787c05454d1e84a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bd3231b839c6cf7ebd671d696bf7f6aecfcf4282d4c4dfa787c05454d1e84a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b"}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bd3231b839c6cf7ebd671d696bf7f6aecfcf4282d4c4dfa787c05454d1e84a9"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35"}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"}
{"level":"debug","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"}
{"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"}
{"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"}
{"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639"}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f"}
{"level":"info","ts":"2026-07-14T01:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"error","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd1c649ec2cc1cb3602e02fe00014623bd14abca32897c751b25513b27128345"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd1c649ec2cc1cb3602e02fe00014623bd14abca32897c751b25513b27128345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd1c649ec2cc1cb3602e02fe00014623bd14abca32897c751b25513b27128345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a407b68a191716a6b99aa332a9be63139e174a40a5816dc027a7e22452d9e64c"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd1c649ec2cc1cb3602e02fe00014623bd14abca32897c751b25513b27128345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a407b68a191716a6b99aa332a9be63139e174a40a5816dc027a7e22452d9e64c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a407b68a191716a6b99aa332a9be63139e174a40a5816dc027a7e22452d9e64c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd1c649ec2cc1cb3602e02fe00014623bd14abca32897c751b25513b27128345"}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a407b68a191716a6b99aa332a9be63139e174a40a5816dc027a7e22452d9e64c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a407b68a191716a6b99aa332a9be63139e174a40a5816dc027a7e22452d9e64c"}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd1c649ec2cc1cb3602e02fe00014623bd14abca32897c751b25513b27128345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a407b68a191716a6b99aa332a9be63139e174a40a5816dc027a7e22452d9e64c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"info","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55170","PortSpecifier":{"PortValue":55170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a26ff975-3251-44d0-8e26-6d767d329efb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55170","PortSpecifier":{"PortValue":55170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993512,"nanos":178746663},"http":{"id":"a26ff975-3251-44d0-8e26-6d767d329efb","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/auth-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a26ff975-3251-44d0-8e26-6d767d329efb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36954","PortSpecifier":{"PortValue":36954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36954","PortSpecifier":{"PortValue":36954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993512,"nanos":233482863},"http":{"id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/auth-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bea402f3-0ce5-4f43-a615-1fe7cdae7be5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55184","PortSpecifier":{"PortValue":55184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","method":"GET","path":"/maas-api/v1/api-keys/20d29adf-d290-4fd1-8627-277cbbddd244","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55184","PortSpecifier":{"PortValue":55184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993512,"nanos":286276428},"http":{"id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","method":"GET","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/20d29adf-d290-4fd1-8627-277cbbddd244",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/20d29adf-d290-4fd1-8627-277cbbddd244",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/auth-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de5924b0-3346-4bd3-87ad-28b53f0a2635","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36962","PortSpecifier":{"PortValue":36962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"775efb32-aa5a-476f-9528-1877bfc0f97e","method":"GET","path":"/maas-api/v1/api-keys/e5656084-37b3-4aec-8507-f89ce1acf588","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36962","PortSpecifier":{"PortValue":36962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993512,"nanos":324482634},"http":{"id":"775efb32-aa5a-476f-9528-1877bfc0f97e","method":"GET","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e5656084-37b3-4aec-8507-f89ce1acf588",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e5656084-37b3-4aec-8507-f89ce1acf588",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/auth-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"775efb32-aa5a-476f-9528-1877bfc0f97e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59430","PortSpecifier":{"PortValue":59430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59430","PortSpecifier":{"PortValue":59430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993529,"nanos":586324778},"http":{"id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/auth-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07f1021d-a714-4231-8e9b-dc0c1a99eff0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40252","PortSpecifier":{"PortValue":40252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c50242b-13a4-43b7-91fd-9d718242a373","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40252","PortSpecifier":{"PortValue":40252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993529,"nanos":626787286},"http":{"id":"0c50242b-13a4-43b7-91fd-9d718242a373","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/auth-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c50242b-13a4-43b7-91fd-9d718242a373","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59432","PortSpecifier":{"PortValue":59432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59432","PortSpecifier":{"PortValue":59432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993529,"nanos":671238879},"http":{"id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","method":"GET","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d4k40ozb5UTz5qzy_1YTdpWrqs6vm1QUsUTaeIwRlN3zyP73YS33NeIuPSQO"}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d4k40ozb5UTz5qzy_1YTdpWrqs6vm1QUsUTaeIwRlN3zyP73YS33NeIuPSQO\"}"}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3f255ac5-28ff-4717-9669-524794ceac4b","keyName":"e2e-auth-iso-a-c84d2e","subscription":"e2e-auth-iso-d667f2","tenant":"e2e-shared-a-99e8d0","userId":"3f255ac5-28ff-4717-9669-524794ceac4b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/auth-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d667f2"}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db6e3c3c-2e81-42c0-9786-a737e7e5e1f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be55b562-d89f-4846-bb84-9def20400a40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48952","PortSpecifier":{"PortValue":48952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be55b562-d89f-4846-bb84-9def20400a40","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be55b562-d89f-4846-bb84-9def20400a40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48952","PortSpecifier":{"PortValue":48952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993546,"nanos":863343584},"http":{"id":"be55b562-d89f-4846-bb84-9def20400a40","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be55b562-d89f-4846-bb84-9def20400a40","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be55b562-d89f-4846-bb84-9def20400a40","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be55b562-d89f-4846-bb84-9def20400a40","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be55b562-d89f-4846-bb84-9def20400a40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be55b562-d89f-4846-bb84-9def20400a40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be55b562-d89f-4846-bb84-9def20400a40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/auth-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be55b562-d89f-4846-bb84-9def20400a40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be55b562-d89f-4846-bb84-9def20400a40","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be55b562-d89f-4846-bb84-9def20400a40","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be55b562-d89f-4846-bb84-9def20400a40","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be55b562-d89f-4846-bb84-9def20400a40","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45868","PortSpecifier":{"PortValue":45868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1edd85c8-29d2-460b-8772-7d05a7707aab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45868","PortSpecifier":{"PortValue":45868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993546,"nanos":902242001},"http":{"id":"1edd85c8-29d2-460b-8772-7d05a7707aab","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/auth-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1edd85c8-29d2-460b-8772-7d05a7707aab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"039df135-f7d5-4d40-8d1c-5766a47d14b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45880","PortSpecifier":{"PortValue":45880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"039df135-f7d5-4d40-8d1c-5766a47d14b0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"039df135-f7d5-4d40-8d1c-5766a47d14b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45880","PortSpecifier":{"PortValue":45880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993546,"nanos":939654126},"http":{"id":"039df135-f7d5-4d40-8d1c-5766a47d14b0","method":"GET","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"039df135-f7d5-4d40-8d1c-5766a47d14b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vZFqXrqAPedrfclI_xeIzfFkBjEK34LkbcEesaJgGCUGyur3tgLCo2CYfLie"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"039df135-f7d5-4d40-8d1c-5766a47d14b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e42ce1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vZFqXrqAPedrfclI_xeIzfFkBjEK34LkbcEesaJgGCUGyur3tgLCo2CYfLie\"}"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"039df135-f7d5-4d40-8d1c-5766a47d14b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e42ce1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"039df135-f7d5-4d40-8d1c-5766a47d14b0","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"039df135-f7d5-4d40-8d1c-5766a47d14b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"039df135-f7d5-4d40-8d1c-5766a47d14b0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"039df135-f7d5-4d40-8d1c-5766a47d14b0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40182","PortSpecifier":{"PortValue":40182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d81df06-88b7-41f1-868f-508ecf2e666b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40182","PortSpecifier":{"PortValue":40182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993564,"nanos":105878948},"http":{"id":"8d81df06-88b7-41f1-868f-508ecf2e666b","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/auth-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d81df06-88b7-41f1-868f-508ecf2e666b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51514","PortSpecifier":{"PortValue":51514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51514","PortSpecifier":{"PortValue":51514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993564,"nanos":145365485},"http":{"id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/auth-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6b2cbcc-3db3-4fb1-b2d3-854fa1c6d2e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40190","PortSpecifier":{"PortValue":40190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40190","PortSpecifier":{"PortValue":40190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993564,"nanos":182556169},"http":{"id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/auth-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b26b121-96ff-4900-8a1c-f04bd63f5619","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51530","PortSpecifier":{"PortValue":51530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"346b895d-4e4e-4340-b41c-bb127ed70155","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51530","PortSpecifier":{"PortValue":51530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993564,"nanos":215929076},"http":{"id":"346b895d-4e4e-4340-b41c-bb127ed70155","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/auth-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"346b895d-4e4e-4340-b41c-bb127ed70155","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39378","PortSpecifier":{"PortValue":39378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0efea7e9-432d-4857-bfca-6e53dd458d48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39378","PortSpecifier":{"PortValue":39378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993581,"nanos":375620617},"http":{"id":"0efea7e9-432d-4857-bfca-6e53dd458d48","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/auth-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0efea7e9-432d-4857-bfca-6e53dd458d48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41846","PortSpecifier":{"PortValue":41846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41846","PortSpecifier":{"PortValue":41846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993581,"nanos":415985409},"http":{"id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/auth-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4417a3d1-a47c-4bb8-9944-4dd9c7c559ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41852","PortSpecifier":{"PortValue":41852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b23bb680-58fd-4465-ae2e-83ab466d3299","method":"GET","path":"/maas-api/v1/api-keys/e93e93bf-b7f3-4cc2-9b72-2d66be4a1c30","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41852","PortSpecifier":{"PortValue":41852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993581,"nanos":452369455},"http":{"id":"b23bb680-58fd-4465-ae2e-83ab466d3299","method":"GET","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e93e93bf-b7f3-4cc2-9b72-2d66be4a1c30",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e93e93bf-b7f3-4cc2-9b72-2d66be4a1c30",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/auth-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b23bb680-58fd-4465-ae2e-83ab466d3299","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39382","PortSpecifier":{"PortValue":39382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1f5f97b-0220-407c-bec2-068a71984c8c","method":"GET","path":"/maas-api/v1/api-keys/e93e93bf-b7f3-4cc2-9b72-2d66be4a1c30","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39382","PortSpecifier":{"PortValue":39382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993581,"nanos":485363241},"http":{"id":"b1f5f97b-0220-407c-bec2-068a71984c8c","method":"GET","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e93e93bf-b7f3-4cc2-9b72-2d66be4a1c30",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e93e93bf-b7f3-4cc2-9b72-2d66be4a1c30",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/auth-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1f5f97b-0220-407c-bec2-068a71984c8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36554","PortSpecifier":{"PortValue":36554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36554","PortSpecifier":{"PortValue":36554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993598,"nanos":571145509},"http":{"id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/auth-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b4bc1c7-eafd-4f6c-9bf5-c580b77e6c9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51452","PortSpecifier":{"PortValue":51452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51452","PortSpecifier":{"PortValue":51452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993598,"nanos":611500552},"http":{"id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/auth-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3f41943-e7dc-4d35-ab48-f1970a05f7bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36570","PortSpecifier":{"PortValue":36570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36570","PortSpecifier":{"PortValue":36570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993598,"nanos":652176050},"http":{"id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aij9WUK5lOWDeM37_TmikyAQzh9Eg8W7Dl5CnL0RBJjk7L2B3tMYghEvMAhn"}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aij9WUK5lOWDeM37_TmikyAQzh9Eg8W7Dl5CnL0RBJjk7L2B3tMYghEvMAhn\"}"}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25723233-85f7-435d-b52d-c7b888bad760","keyName":"e2e-auth-iso-a-eaa28b","subscription":"e2e-auth-iso-e2bbe2","tenant":"e2e-shared-a-99e8d0","userId":"25723233-85f7-435d-b52d-c7b888bad760","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/auth-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e2bbe2"}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2c6f6d7-ed21-481d-9ec2-da86c17e1156","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1179a8b21b18530fd8daeaf390684b31a1fee5c7ef7b65f23c8aa45030f96d3b"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98b470506dc5b20fe8c4c49220466f260fea3f1ed8e0b998299ecfd587840179"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44bef9631fc11a74a26d9dbeb99f25f649b566a78893efd2093257f904a41606"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfbc277131df47dea8c07d92d0891f94529a0ff41270312ee12287542a3c9509"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/194de305d75ef586d53175b1ea031c250a13ab6abe60c1d2860e19233f9b0a35"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc79c54ab2e0f53e821f27d9e38db9494ddf099fbc0418c8008708c7a2d8d33a"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82f3087643bd910f0254c2b1692e1d2d4f47fd02f3c09ded291f5e5b6f9ca82d"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc60573aaed0ec61a07281c7164c12d6db4096778fc2ec5555a83e0f596eea17"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c94055518128e7ac88fa831621521da7f23713727037dea0dadad388a35b5c2"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e9b0765360666de98769644b77b75589b3df0b0566f34f7b7b0cd7dd603a733"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bd3231b839c6cf7ebd671d696bf7f6aecfcf4282d4c4dfa787c05454d1e84a9"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e442c060c7d1f71d06c157426e27c99cc6f93602614b5a235b5d6d74fc3bcb43"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffc654f7d7311cbbe1b04be86e8bd6b87c80257ab612a422a7508cc0d511357b"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee9fe5ba3727d2a7d458dee608264416fb649481344e58bc2f453fb93c47425f"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e3a9d646d5d13940510464118e64c92d52a905ea5e74942d799a5a772e3b639"}
{"level":"info","ts":"2026-07-14T01:46:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aa44ffdf3b31d36e086d2db4a2a9e659c338b239e9b8e7aca7d126ce47f6fa2"}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:46:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:46:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99"}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99"}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec"}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec"}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298"}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a"}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a"}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a"}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a"}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8789a4fdb2336ec10277d3eae7e20eb3fe317bb5c0b7c72989ac6a6cdd394ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8789a4fdb2336ec10277d3eae7e20eb3fe317bb5c0b7c72989ac6a6cdd394ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8789a4fdb2336ec10277d3eae7e20eb3fe317bb5c0b7c72989ac6a6cdd394ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8789a4fdb2336ec10277d3eae7e20eb3fe317bb5c0b7c72989ac6a6cdd394ee"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8789a4fdb2336ec10277d3eae7e20eb3fe317bb5c0b7c72989ac6a6cdd394ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8789a4fdb2336ec10277d3eae7e20eb3fe317bb5c0b7c72989ac6a6cdd394ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8789a4fdb2336ec10277d3eae7e20eb3fe317bb5c0b7c72989ac6a6cdd394ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8789a4fdb2336ec10277d3eae7e20eb3fe317bb5c0b7c72989ac6a6cdd394ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903"}
{"level":"error","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8789a4fdb2336ec10277d3eae7e20eb3fe317bb5c0b7c72989ac6a6cdd394ee"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8"}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8"}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8"}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a"}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7198edc557c3b3c3856259579d517af3d3369360c80f1e7b768e881f8cdab068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7198edc557c3b3c3856259579d517af3d3369360c80f1e7b768e881f8cdab068"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298"}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5"}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a407b68a191716a6b99aa332a9be63139e174a40a5816dc027a7e22452d9e64c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a407b68a191716a6b99aa332a9be63139e174a40a5816dc027a7e22452d9e64c"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8"}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8789a4fdb2336ec10277d3eae7e20eb3fe317bb5c0b7c72989ac6a6cdd394ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd1c649ec2cc1cb3602e02fe00014623bd14abca32897c751b25513b27128345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8789a4fdb2336ec10277d3eae7e20eb3fe317bb5c0b7c72989ac6a6cdd394ee"}
{"level":"debug","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd1c649ec2cc1cb3602e02fe00014623bd14abca32897c751b25513b27128345"}
{"level":"info","ts":"2026-07-14T01:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a"}
{"level":"debug","ts":"2026-07-14T01:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"}
{"level":"debug","ts":"2026-07-14T01:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"}
{"level":"debug","ts":"2026-07-14T01:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"}
{"level":"info","ts":"2026-07-14T01:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37"}
{"level":"info","ts":"2026-07-14T01:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c"}
{"level":"info","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42432","PortSpecifier":{"PortValue":42432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42432","PortSpecifier":{"PortValue":42432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993680,"nanos":64723351},"http":{"id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/sub-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e25e18a7-ad1c-4c5d-b68b-ae4245b61cb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38932","PortSpecifier":{"PortValue":38932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38932","PortSpecifier":{"PortValue":38932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993680,"nanos":109111860},"http":{"id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/sub-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1b86136-09df-46fc-b666-ca8f5cf280c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42444","PortSpecifier":{"PortValue":42444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42444","PortSpecifier":{"PortValue":42444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993680,"nanos":149661167},"http":{"id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","method":"GET","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-o0K6vzSqvPISGopF_G24vSxm7UCrW8OEFwHnF08TO4ghHA7lPwZDvVc4x8cc"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-o0K6vzSqvPISGopF_G24vSxm7UCrW8OEFwHnF08TO4ghHA7lPwZDvVc4x8cc\"}"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0a9ab116-cdad-47bb-91fa-408fc7ac6c06","keyName":"e2e-sub-iso-6f54fd","subscription":"e2e-a-only-89ec5f","tenant":"e2e-shared-a-99e8d0","userId":"0a9ab116-cdad-47bb-91fa-408fc7ac6c06","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/sub-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-89ec5f"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3464a0af-4f43-4002-93b2-6d8e43eb8c69","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38934","PortSpecifier":{"PortValue":38934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38934","PortSpecifier":{"PortValue":38934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993680,"nanos":197773277},"http":{"id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","method":"GET","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DRjK8zNP3opIaQbA_VtEIqpG5EF2iKMHcfY7yEZaJeav3UJmquYG08yfvqUP"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e42ce1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DRjK8zNP3opIaQbA_VtEIqpG5EF2iKMHcfY7yEZaJeav3UJmquYG08yfvqUP\"}"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e42ce1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6e61d653-6a70-42ae-9ce6-f4116417638f","keyName":"e2e-sub-iso-29a640","subscription":"e2e-b-only-89ec5f","tenant":"e2e-shared-b-e42ce1","userId":"6e61d653-6a70-42ae-9ce6-f4116417638f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/sub-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-89ec5f"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:48:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7942cc3f-aba8-45ad-83a3-86a52b1784c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43290","PortSpecifier":{"PortValue":43290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43290","PortSpecifier":{"PortValue":43290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993696,"nanos":654402366},"http":{"id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/sub-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33941bda-60ba-4820-a5a1-e26dcbd59f11","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56206","PortSpecifier":{"PortValue":56206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56206","PortSpecifier":{"PortValue":56206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993696,"nanos":692621317},"http":{"id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/sub-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d75a0e3-4c3e-4bbd-a5a7-b862a90812da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43294","PortSpecifier":{"PortValue":43294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43294","PortSpecifier":{"PortValue":43294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993696,"nanos":726552107},"http":{"id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SWdAlfGFW69pVV0z_5CwaYnNAYacRlg15m33jLx9J1h5Ygy47vNWWBErsPS"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SWdAlfGFW69pVV0z_5CwaYnNAYacRlg15m33jLx9J1h5Ygy47vNWWBErsPS\"}"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1f2c8034-beb4-4531-b4b0-0a7a11900fc4","keyName":"e2e-sub-iso-6d3b3b","subscription":"e2e-shared-sub-810e2a","tenant":"e2e-shared-a-99e8d0","userId":"1f2c8034-beb4-4531-b4b0-0a7a11900fc4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/sub-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-810e2a"}
{"level":"info","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98b3cf90-c359-4c35-8de6-b5e008fdac72","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56210","PortSpecifier":{"PortValue":56210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"427da4ea-94c2-4bd7-98fe-a33da142357f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56210","PortSpecifier":{"PortValue":56210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993696,"nanos":757798493},"http":{"id":"427da4ea-94c2-4bd7-98fe-a33da142357f","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-di3rspeYtPItxPGJ_cekwamw5Qmq2WSDCKmQuGq3EnAebL2XCAka8u2aElOO"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e42ce1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-di3rspeYtPItxPGJ_cekwamw5Qmq2WSDCKmQuGq3EnAebL2XCAka8u2aElOO\"}"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e42ce1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a4491d3c-2644-4e31-b540-cb0cbb5de568","keyName":"e2e-sub-iso-262887","subscription":"e2e-shared-sub-810e2a","tenant":"e2e-shared-b-e42ce1","userId":"a4491d3c-2644-4e31-b540-cb0cbb5de568","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/sub-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-810e2a"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"427da4ea-94c2-4bd7-98fe-a33da142357f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:48:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d0ee2726ca5fcd30ac002f6dc43597deb767f20baecb4278c80d15d4bb9babe"}
{"level":"info","ts":"2026-07-14T01:48:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f4d28dbefa563ebedc7659ad07714b10767612c88e4c6229b76a73f64ba4298"}
{"level":"info","ts":"2026-07-14T01:48:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67c92f38039db11d489c27a1332fb23ad0341443eee096d1d50f78d2c7280d99"}
{"level":"info","ts":"2026-07-14T01:48:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8789a4fdb2336ec10277d3eae7e20eb3fe317bb5c0b7c72989ac6a6cdd394ee"}
{"level":"info","ts":"2026-07-14T01:48:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31243ad683b04c518a13d664d60703f596e2f181f0f8ed963f092bc911d0888a"}
{"level":"info","ts":"2026-07-14T01:48:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30f60b7de37c36f44bd6f87364739ade1ef11160a947862c8131d32133153f9a"}
{"level":"info","ts":"2026-07-14T01:48:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/202229c55141518beb5fcfe4630a2b98a900c6ee21be7dd9b3de876a4200fe6c"}
{"level":"info","ts":"2026-07-14T01:48:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/156db98bf6ec7ff47e93d0eb07159f0404c6f9721de777bc348f8f976abcf2a8"}
{"level":"info","ts":"2026-07-14T01:48:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/810ff5d1913a1d7a76cbc5470b11091aa0391c110710e9939a425cf680e01128"}
{"level":"info","ts":"2026-07-14T01:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b8e99f8ee0f6a8e514ead894ebe580d155076bca17cb43c851c050ef7a27b37"}
{"level":"info","ts":"2026-07-14T01:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3d76f4457c48300cfd33e02b44cbbf841c06b8b08dc34c9b004a8a05fa038ce"}
{"level":"info","ts":"2026-07-14T01:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865c383992d8c21b0cca9204227f6e6f33631f2375bca208dac3c0f917eb9903"}
{"level":"info","ts":"2026-07-14T01:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/431c3df82879407c2184d61d5cd77da0e9c268f35d67c779dc24170c92ab25ec"}
{"level":"info","ts":"2026-07-14T01:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b221f540b14dadc778400f3dc1acefaf6f1ed6278c04ab0af9fdfc526f273e37"}
{"level":"info","ts":"2026-07-14T01:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a66819ac4a1558c2cc02cb75bded6dfb38dd327cc23e678bc99a0b413d839413"}
{"level":"info","ts":"2026-07-14T01:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/388025e470f264bc533d840bbcda47360498b33a8cfdab255c1bc57b60e770e5"}
{"level":"debug","ts":"2026-07-14T01:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610"}
{"level":"debug","ts":"2026-07-14T01:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610"}
{"level":"debug","ts":"2026-07-14T01:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:48:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:48:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1"}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68"}
{"level":"error","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68"}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933"}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933"}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68"}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933"}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48"}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48"}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93dc4f87f2bec67029067cdcf15c46785c28a680645037ed3a95d63d3b30d694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93dc4f87f2bec67029067cdcf15c46785c28a680645037ed3a95d63d3b30d694","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93dc4f87f2bec67029067cdcf15c46785c28a680645037ed3a95d63d3b30d694"}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93dc4f87f2bec67029067cdcf15c46785c28a680645037ed3a95d63d3b30d694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93dc4f87f2bec67029067cdcf15c46785c28a680645037ed3a95d63d3b30d694"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48"}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93dc4f87f2bec67029067cdcf15c46785c28a680645037ed3a95d63d3b30d694","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93dc4f87f2bec67029067cdcf15c46785c28a680645037ed3a95d63d3b30d694","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7"}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:48:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93dc4f87f2bec67029067cdcf15c46785c28a680645037ed3a95d63d3b30d694"}
{"level":"info","ts":"2026-07-14T01:48:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7"}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8"}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d"}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a43709e1cfbdef84f1052206427e3547796ce0f0b453fa29c435512fb981e62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a43709e1cfbdef84f1052206427e3547796ce0f0b453fa29c435512fb981e62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a43709e1cfbdef84f1052206427e3547796ce0f0b453fa29c435512fb981e62"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a43709e1cfbdef84f1052206427e3547796ce0f0b453fa29c435512fb981e62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a43709e1cfbdef84f1052206427e3547796ce0f0b453fa29c435512fb981e62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a43709e1cfbdef84f1052206427e3547796ce0f0b453fa29c435512fb981e62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a43709e1cfbdef84f1052206427e3547796ce0f0b453fa29c435512fb981e62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a43709e1cfbdef84f1052206427e3547796ce0f0b453fa29c435512fb981e62"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"}
{"level":"info","ts":"2026-07-14T01:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b"}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a"}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a"}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a"}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad"}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad"}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a407b68a191716a6b99aa332a9be63139e174a40a5816dc027a7e22452d9e64c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24"}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a407b68a191716a6b99aa332a9be63139e174a40a5816dc027a7e22452d9e64c"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933"}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4"}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4"}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4"}
{"level":"info","ts":"2026-07-14T01:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd1c649ec2cc1cb3602e02fe00014623bd14abca32897c751b25513b27128345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a43709e1cfbdef84f1052206427e3547796ce0f0b453fa29c435512fb981e62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd1c649ec2cc1cb3602e02fe00014623bd14abca32897c751b25513b27128345"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad"}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a43709e1cfbdef84f1052206427e3547796ce0f0b453fa29c435512fb981e62"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b"}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a"}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7198edc557c3b3c3856259579d517af3d3369360c80f1e7b768e881f8cdab068","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8"}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7198edc557c3b3c3856259579d517af3d3369360c80f1e7b768e881f8cdab068"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93dc4f87f2bec67029067cdcf15c46785c28a680645037ed3a95d63d3b30d694","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1"}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93dc4f87f2bec67029067cdcf15c46785c28a680645037ed3a95d63d3b30d694"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:49:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:49:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"info","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56998","PortSpecifier":{"PortValue":56998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56998","PortSpecifier":{"PortValue":56998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993762,"nanos":138815762},"http":{"id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbd7ae4a-574c-4fe4-9b0d-fc630af037e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41364","PortSpecifier":{"PortValue":41364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5312eed0-74a0-47e3-827a-5f07245f7024","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41364","PortSpecifier":{"PortValue":41364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993762,"nanos":179933611},"http":{"id":"5312eed0-74a0-47e3-827a-5f07245f7024","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/rate-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5312eed0-74a0-47e3-827a-5f07245f7024","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"376377de-a660-4a5e-ae44-27f5e581de54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57004","PortSpecifier":{"PortValue":57004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"376377de-a660-4a5e-ae44-27f5e581de54","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"376377de-a660-4a5e-ae44-27f5e581de54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57004","PortSpecifier":{"PortValue":57004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993762,"nanos":220695082},"http":{"id":"376377de-a660-4a5e-ae44-27f5e581de54","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YzXoTd6KxUfuNzWd_7qqULEGIM8TVjuZdYsjAZRog5Wf1cHjp0O8hbRwTdj9"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YzXoTd6KxUfuNzWd_7qqULEGIM8TVjuZdYsjAZRog5Wf1cHjp0O8hbRwTdj9\"}"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7971a529-7638-41d6-822b-4e70ded8c1de","keyName":"e2e-rate-a-823efe","subscription":"e2e-rate-iso-a-823efe","tenant":"e2e-shared-a-99e8d0","userId":"7971a529-7638-41d6-822b-4e70ded8c1de","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-823efe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-823efe","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"376377de-a660-4a5e-ae44-27f5e581de54","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-823efe"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"376377de-a660-4a5e-ae44-27f5e581de54","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7971a529-7638-41d6-822b-4e70ded8c1de","keyName":"e2e-rate-a-823efe","selected_subscription":"e2e-rate-iso-a-823efe","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-823efe@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-823efe","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"376377de-a660-4a5e-ae44-27f5e581de54","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"376377de-a660-4a5e-ae44-27f5e581de54","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57020","PortSpecifier":{"PortValue":57020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57020","PortSpecifier":{"PortValue":57020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993763,"nanos":295100289},"http":{"id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YzXoTd6KxUfuNzWd_7qqULEGIM8TVjuZdYsjAZRog5Wf1cHjp0O8hbRwTdj9"}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YzXoTd6KxUfuNzWd_7qqULEGIM8TVjuZdYsjAZRog5Wf1cHjp0O8hbRwTdj9\"}"}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7971a529-7638-41d6-822b-4e70ded8c1de","keyName":"e2e-rate-a-823efe","subscription":"e2e-rate-iso-a-823efe","tenant":"e2e-shared-a-99e8d0","userId":"7971a529-7638-41d6-822b-4e70ded8c1de","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-823efe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-823efe","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-823efe"}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7971a529-7638-41d6-822b-4e70ded8c1de","keyName":"e2e-rate-a-823efe","selected_subscription":"e2e-rate-iso-a-823efe","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-823efe@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-823efe","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26e03aa1-ed29-4c3a-ae61-e4645134f834","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57036","PortSpecifier":{"PortValue":57036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57036","PortSpecifier":{"PortValue":57036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993764,"nanos":342108892},"http":{"id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YzXoTd6KxUfuNzWd_7qqULEGIM8TVjuZdYsjAZRog5Wf1cHjp0O8hbRwTdj9"}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YzXoTd6KxUfuNzWd_7qqULEGIM8TVjuZdYsjAZRog5Wf1cHjp0O8hbRwTdj9\"}"}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7971a529-7638-41d6-822b-4e70ded8c1de","keyName":"e2e-rate-a-823efe","subscription":"e2e-rate-iso-a-823efe","tenant":"e2e-shared-a-99e8d0","userId":"7971a529-7638-41d6-822b-4e70ded8c1de","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-823efe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-823efe","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-823efe"}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7971a529-7638-41d6-822b-4e70ded8c1de","keyName":"e2e-rate-a-823efe","selected_subscription":"e2e-rate-iso-a-823efe","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-823efe@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-823efe","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9ed1878-4a6c-4942-b1d2-9de2438c8b69","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33826","PortSpecifier":{"PortValue":33826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33826","PortSpecifier":{"PortValue":33826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993772,"nanos":961090813},"http":{"id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5602bcd8-3c8b-4df5-bc59-59267946a77b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48538","PortSpecifier":{"PortValue":48538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48538","PortSpecifier":{"PortValue":48538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993773,"nanos":6284634},"http":{"id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a66dd43d-017f-471c-8bfb-30823b45330f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"]}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b9e308cff4b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7768e9ac-b6c2-4bd1-b6cd-3fe5d8950a20"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a66dd43d-017f-471c-8bfb-30823b45330f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/rate-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eb912a2-29e1-4f45-8402-fe92aec40c67","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33832","PortSpecifier":{"PortValue":33832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27f5b508-e402-4bbe-8d91-87c962416f85","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33832","PortSpecifier":{"PortValue":33832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993773,"nanos":49332604},"http":{"id":"27f5b508-e402-4bbe-8d91-87c962416f85","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q"}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q\"}"}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","subscription":"e2e-rate-iso-a-7ac6d3","tenant":"e2e-shared-a-99e8d0","userId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7ac6d3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ac6d3"}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","selected_subscription":"e2e-rate-iso-a-7ac6d3","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-7ac6d3@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27f5b508-e402-4bbe-8d91-87c962416f85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"068adad9-a882-443c-9e84-606594cce0d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33842","PortSpecifier":{"PortValue":33842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"068adad9-a882-443c-9e84-606594cce0d3","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"068adad9-a882-443c-9e84-606594cce0d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33842","PortSpecifier":{"PortValue":33842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993774,"nanos":83570123},"http":{"id":"068adad9-a882-443c-9e84-606594cce0d3","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q"}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q\"}"}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","subscription":"e2e-rate-iso-a-7ac6d3","tenant":"e2e-shared-a-99e8d0","userId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7ac6d3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"068adad9-a882-443c-9e84-606594cce0d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ac6d3"}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"068adad9-a882-443c-9e84-606594cce0d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","selected_subscription":"e2e-rate-iso-a-7ac6d3","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-7ac6d3@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"068adad9-a882-443c-9e84-606594cce0d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"068adad9-a882-443c-9e84-606594cce0d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33856","PortSpecifier":{"PortValue":33856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33856","PortSpecifier":{"PortValue":33856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993775,"nanos":143197742},"http":{"id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q"}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q\"}"}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","subscription":"e2e-rate-iso-a-7ac6d3","tenant":"e2e-shared-a-99e8d0","userId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7ac6d3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ac6d3"}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","selected_subscription":"e2e-rate-iso-a-7ac6d3","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-7ac6d3@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e08926b-d23e-4699-9d23-6d2e876e9fcb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33858","PortSpecifier":{"PortValue":33858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33858","PortSpecifier":{"PortValue":33858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993776,"nanos":185146998},"http":{"id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q"}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q\"}"}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","subscription":"e2e-rate-iso-a-7ac6d3","tenant":"e2e-shared-a-99e8d0","userId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7ac6d3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ac6d3"}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","selected_subscription":"e2e-rate-iso-a-7ac6d3","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-7ac6d3@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e00d61d0-6d70-4ce9-a0da-fbe5cfd2c338","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47152","PortSpecifier":{"PortValue":47152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47152","PortSpecifier":{"PortValue":47152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993777,"nanos":219751190},"http":{"id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q"}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q\"}"}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","subscription":"e2e-rate-iso-a-7ac6d3","tenant":"e2e-shared-a-99e8d0","userId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7ac6d3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ac6d3"}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","selected_subscription":"e2e-rate-iso-a-7ac6d3","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-7ac6d3@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05de0dd6-519c-499d-aee7-6d2ac8280a8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47160","PortSpecifier":{"PortValue":47160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47160","PortSpecifier":{"PortValue":47160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993778,"nanos":256163513},"http":{"id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q"}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q\"}"}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","subscription":"e2e-rate-iso-a-7ac6d3","tenant":"e2e-shared-a-99e8d0","userId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7ac6d3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ac6d3"}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","selected_subscription":"e2e-rate-iso-a-7ac6d3","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-7ac6d3@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6493d8ef-96b9-4ee5-a211-d9739c21030a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47174","PortSpecifier":{"PortValue":47174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b5acbda-c440-414d-8c5e-869830749dfb","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47174","PortSpecifier":{"PortValue":47174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993779,"nanos":295848616},"http":{"id":"5b5acbda-c440-414d-8c5e-869830749dfb","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q"}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q\"}"}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","subscription":"e2e-rate-iso-a-7ac6d3","tenant":"e2e-shared-a-99e8d0","userId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7ac6d3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ac6d3"}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","selected_subscription":"e2e-rate-iso-a-7ac6d3","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-7ac6d3@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b5acbda-c440-414d-8c5e-869830749dfb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47186","PortSpecifier":{"PortValue":47186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47186","PortSpecifier":{"PortValue":47186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993780,"nanos":343979167},"http":{"id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q"}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q\"}"}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","subscription":"e2e-rate-iso-a-7ac6d3","tenant":"e2e-shared-a-99e8d0","userId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7ac6d3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ac6d3"}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","selected_subscription":"e2e-rate-iso-a-7ac6d3","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-7ac6d3@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"323f2506-41ac-4a1b-b5b4-3f4dc1a1bc10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47200","PortSpecifier":{"PortValue":47200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47200","PortSpecifier":{"PortValue":47200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993781,"nanos":379454370},"http":{"id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q"}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q\"}"}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","subscription":"e2e-rate-iso-a-7ac6d3","tenant":"e2e-shared-a-99e8d0","userId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7ac6d3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ac6d3"}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","selected_subscription":"e2e-rate-iso-a-7ac6d3","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-7ac6d3@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5488aebc-fe8e-4ede-b62f-1d1234b3c681","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47202","PortSpecifier":{"PortValue":47202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","method":"POST","path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions","host":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47202","PortSpecifier":{"PortValue":47202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993782,"nanos":417238264},"http":{"id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","method":"POST","headers":{":authority":"e2e-shared-a-99e8d0.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JYIK5v8GBBrMCvxV_4fqDX5tSenwnLOeAIGRmNhMXAFS36nHV2n6dCNVhJ3q\"}"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","subscription":"e2e-rate-iso-a-7ac6d3","tenant":"e2e-shared-a-99e8d0","userId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\",\"requestedSubscription\":\"e2e-rate-iso-a-7ac6d3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99e8d0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99e8d0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7ac6d3"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fb01da0-cc92-4ec4-b55c-fd2446bef62d","keyName":"e2e-rate-a-7ac6d3","selected_subscription":"e2e-rate-iso-a-7ac6d3","selected_subscription_key":"ai-tenant-e2e-shared-a-99e8d0/e2e-rate-iso-a-7ac6d3@ai-tenant-e2e-shared-a-99e8d0/rate-test-model-99e8d0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99e8d0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7ac6d3","namespace":"ai-tenant-e2e-shared-a-99e8d0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8967e6f-428d-4c8f-bc5f-91c7bf667471","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52750","PortSpecifier":{"PortValue":52750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","method":"POST","path":"/ai-tenant-e2e-shared-b-e42ce1/rate-test-model-e42ce1/v1/completions","host":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52750","PortSpecifier":{"PortValue":52750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993782,"nanos":454283210},"http":{"id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","method":"POST","headers":{":authority":"e2e-shared-b-e42ce1.apps.2f6647da-8895-4cb1-af82-b9e308cff4b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e42ce1/rate-test-model-e42ce1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nBQBTM8jYUWZMZSw_x6Zw9hOkNnnCe5azdf0cgdQS1k0I2FMRkn4xZkj8WtA"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e42ce1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nBQBTM8jYUWZMZSw_x6Zw9hOkNnnCe5azdf0cgdQS1k0I2FMRkn4xZkj8WtA\"}"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e42ce1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59e9e928-5d7c-42c3-a8d0-6b280e1f3dec","keyName":"e2e-rate-b-7ac6d3","subscription":"e2e-rate-iso-b-7ac6d3","tenant":"e2e-shared-b-e42ce1","userId":"59e9e928-5d7c-42c3-a8d0-6b280e1f3dec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e42ce1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e42ce1/rate-test-model-e42ce1\",\"requestedSubscription\":\"e2e-rate-iso-b-7ac6d3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e42ce1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e42ce1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7ac6d3","namespace":"ai-tenant-e2e-shared-b-e42ce1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e42ce1/rate-test-model-e42ce1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e42ce1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-7ac6d3"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59e9e928-5d7c-42c3-a8d0-6b280e1f3dec","keyName":"e2e-rate-b-7ac6d3","selected_subscription":"e2e-rate-iso-b-7ac6d3","selected_subscription_key":"ai-tenant-e2e-shared-b-e42ce1/e2e-rate-iso-b-7ac6d3@ai-tenant-e2e-shared-b-e42ce1/rate-test-model-e42ce1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e42ce1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7ac6d3","namespace":"ai-tenant-e2e-shared-b-e42ce1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:49:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8b2bf8a-58a6-4f27-b6fe-fc3bccf4474c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3719f6a846e156584e4e9bec2959c711b7d729c7ac5a8ecea28f04347097d64a"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63c127ed634e1406a1eaac7e16be70c1c9e82d122eb4a0d1220ad9170c2cb933"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ff7e349059f7b72133c678306f7f6992d90aebf63b51ca89d1c769fa0a16c68"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/050d470bc5f034083df8e1a33b86a9d230f2711240f09b6c16b0f01579b79610"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ff452851a1aa5e66bfa8393716271f1277281ee7b71ef30f3d5781e596326b"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58245946970e60dd802c37a9edc907f64434d7251fd61cfd4e0d3c958f1c79f8"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34259b096645d5df0e8bf3f125bad6d30c422ac8eebd46b4af9ca8c9de42d139"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70ec9aca7ef3a8e78577b37067f089e7ff09ea879b890c7f0b2eb808b10e5b49"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a43709e1cfbdef84f1052206427e3547796ce0f0b453fa29c435512fb981e62"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48856da28288834005a9db69b6e7db787e54904d073bf6fd214ba533515e6af7"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93dc4f87f2bec67029067cdcf15c46785c28a680645037ed3a95d63d3b30d694"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3a050006059922e02e1aee31de19cefc9445300d1ecce341762770d739741f4"}
{"level":"info","ts":"2026-07-14T01:49:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/520a2fb0dc9de8e9dc923a016ad1530805abd992b688734158850bc80da17e1d"}
{"level":"info","ts":"2026-07-14T01:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f605a231da9710d80067ed28a549ddf02de9b39101b14b78705069aaa60655ad"}
{"level":"info","ts":"2026-07-14T01:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ad23f6285e7608ee85af3d33aac60c7d65967a747b35caca0525335df5973d1"}
{"level":"info","ts":"2026-07-14T01:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e8b58d45180e13174455806f6a970f9769ff58982d2d4a2d613a40d0425fe48"}
{"level":"info","ts":"2026-07-14T01:50:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21747a840283ed77ff775e96cc9f9667f67511501855e60185d30098ed75de81"}
{"level":"info","ts":"2026-07-14T01:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec6a8c92473e526604bfd802c28b1ef5db4789cda2b6b7d5b50f750861669162"}
{"level":"info","ts":"2026-07-14T01:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7198edc557c3b3c3856259579d517af3d3369360c80f1e7b768e881f8cdab068"}
{"level":"info","ts":"2026-07-14T01:50:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/168e7f529a222d211e5ee033f06e505d29fa881dae8dfb02b73dbd2651d83d24"}
{"level":"info","ts":"2026-07-14T01:50:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34d14fb3c4ea53a3b781a7044585b3a469ad89abbcadad0d07446c669f82ebc3"}
{"level":"info","ts":"2026-07-14T01:50:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27b9516189d0bc4c1f263d2f7741149c480cb1e29e8b51ab8c06880a6592397f"}
{"level":"info","ts":"2026-07-14T01:50:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd1c649ec2cc1cb3602e02fe00014623bd14abca32897c751b25513b27128345"}
{"level":"info","ts":"2026-07-14T01:50:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a407b68a191716a6b99aa332a9be63139e174a40a5816dc027a7e22452d9e64c"}