--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b"}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0"}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f17f76e858fdce0665936c9ace488efa0be2cda51e3c611c542457dbb151a50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f17f76e858fdce0665936c9ace488efa0be2cda51e3c611c542457dbb151a50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20"}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f17f76e858fdce0665936c9ace488efa0be2cda51e3c611c542457dbb151a50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b"}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f17f76e858fdce0665936c9ace488efa0be2cda51e3c611c542457dbb151a50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0"}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20"}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f17f76e858fdce0665936c9ace488efa0be2cda51e3c611c542457dbb151a50"}
{"level":"info","ts":"2026-07-12T17:44:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0"}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc"}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc"}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc"}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc"}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc"}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2"}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"}
{"level":"debug","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867"}
{"level":"error","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a21a7d10853c7f2ef4b0994446d7acd1a768dd845932a9445102f243615b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a21a7d10853c7f2ef4b0994446d7acd1a768dd845932a9445102f243615b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a21a7d10853c7f2ef4b0994446d7acd1a768dd845932a9445102f243615b7"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3a21a7d10853c7f2ef4b0994446d7acd1a768dd845932a9445102f243615b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3a21a7d10853c7f2ef4b0994446d7acd1a768dd845932a9445102f243615b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3a21a7d10853c7f2ef4b0994446d7acd1a768dd845932a9445102f243615b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3a21a7d10853c7f2ef4b0994446d7acd1a768dd845932a9445102f243615b7"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3a21a7d10853c7f2ef4b0994446d7acd1a768dd845932a9445102f243615b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945"}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:44:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945"}
{"level":"error","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53232","PortSpecifier":{"PortValue":53232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53232","PortSpecifier":{"PortValue":53232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878264,"nanos":940816774},"http":{"id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/auth-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:44:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1a3011d-46c8-49ee-b10b-57875e40b8b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33112","PortSpecifier":{"PortValue":33112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33112","PortSpecifier":{"PortValue":33112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878265,"nanos":9120752},"http":{"id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/auth-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41d0f4d4-357a-4296-a493-87d79a6e66aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53246","PortSpecifier":{"PortValue":53246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","method":"GET","path":"/maas-api/v1/api-keys/a046487c-47f9-45cc-938d-ba6b125f599e","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53246","PortSpecifier":{"PortValue":53246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878265,"nanos":94745796},"http":{"id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","method":"GET","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a046487c-47f9-45cc-938d-ba6b125f599e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a046487c-47f9-45cc-938d-ba6b125f599e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/auth-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5945924c-3e52-44c7-ab32-b2c7d2dd203b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33116","PortSpecifier":{"PortValue":33116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d92e11b0-ad13-4720-88b7-3194df806b2f","method":"GET","path":"/maas-api/v1/api-keys/5b52c5ee-2028-4d53-ad6b-38c10b988d66","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33116","PortSpecifier":{"PortValue":33116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878265,"nanos":142857820},"http":{"id":"d92e11b0-ad13-4720-88b7-3194df806b2f","method":"GET","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5b52c5ee-2028-4d53-ad6b-38c10b988d66",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5b52c5ee-2028-4d53-ad6b-38c10b988d66",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/auth-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:44:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d92e11b0-ad13-4720-88b7-3194df806b2f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35386","PortSpecifier":{"PortValue":35386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca1b2936-1c66-476f-b0bf-971294013a8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35386","PortSpecifier":{"PortValue":35386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878284,"nanos":513197594},"http":{"id":"ca1b2936-1c66-476f-b0bf-971294013a8b","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/auth-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca1b2936-1c66-476f-b0bf-971294013a8b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53084","PortSpecifier":{"PortValue":53084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29b8d9e2-6270-4edd-b169-45191d83913e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53084","PortSpecifier":{"PortValue":53084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878284,"nanos":562450840},"http":{"id":"29b8d9e2-6270-4edd-b169-45191d83913e","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/auth-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29b8d9e2-6270-4edd-b169-45191d83913e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35394","PortSpecifier":{"PortValue":35394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72444a6c-0aca-48da-b610-01ca4150b7e1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35394","PortSpecifier":{"PortValue":35394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878284,"nanos":603839710},"http":{"id":"72444a6c-0aca-48da-b610-01ca4150b7e1","method":"GET","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vwyhAHd9uQGTp5ms_Skunt6D2OdVLsldhSbOJpKLfsU4NsMxI6q0xHQ7hFz4"}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vwyhAHd9uQGTp5ms_Skunt6D2OdVLsldhSbOJpKLfsU4NsMxI6q0xHQ7hFz4\"}"}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0c58294-9ee0-4ab8-8f08-7ac1fe503497","keyName":"e2e-auth-iso-a-71aae6","subscription":"e2e-auth-iso-d79690","tenant":"e2e-shared-a-e767e8","userId":"b0c58294-9ee0-4ab8-8f08-7ac1fe503497","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/auth-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d79690"}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:44:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72444a6c-0aca-48da-b610-01ca4150b7e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40904","PortSpecifier":{"PortValue":40904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40904","PortSpecifier":{"PortValue":40904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878301,"nanos":867616498},"http":{"id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/auth-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86dbc744-c92d-44b9-aac7-be5e1b5fcb6b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44402","PortSpecifier":{"PortValue":44402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44402","PortSpecifier":{"PortValue":44402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878301,"nanos":926047547},"http":{"id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/auth-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66c01b35-3280-40d3-ba5b-576b03e37a1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73b8f7ee-6d2a-4dca-ae24-ef344328e8a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44406","PortSpecifier":{"PortValue":44406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73b8f7ee-6d2a-4dca-ae24-ef344328e8a3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73b8f7ee-6d2a-4dca-ae24-ef344328e8a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44406","PortSpecifier":{"PortValue":44406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878302,"nanos":9427104},"http":{"id":"73b8f7ee-6d2a-4dca-ae24-ef344328e8a3","method":"GET","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73b8f7ee-6d2a-4dca-ae24-ef344328e8a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-s1He9IQjyvAXh6eW_qQEQjATZsnMS4zdwQE0NHgiU7stG5W2Ewqt8m9zhe8g"}
{"level":"debug","ts":"2026-07-12T17:45:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73b8f7ee-6d2a-4dca-ae24-ef344328e8a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-9c75b6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-s1He9IQjyvAXh6eW_qQEQjATZsnMS4zdwQE0NHgiU7stG5W2Ewqt8m9zhe8g\"}"}
{"level":"debug","ts":"2026-07-12T17:45:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73b8f7ee-6d2a-4dca-ae24-ef344328e8a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9c75b6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-12T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73b8f7ee-6d2a-4dca-ae24-ef344328e8a3","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73b8f7ee-6d2a-4dca-ae24-ef344328e8a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"73b8f7ee-6d2a-4dca-ae24-ef344328e8a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-12T17:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73b8f7ee-6d2a-4dca-ae24-ef344328e8a3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-12T17:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73b8f7ee-6d2a-4dca-ae24-ef344328e8a3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34642","PortSpecifier":{"PortValue":34642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34642","PortSpecifier":{"PortValue":34642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878317,"nanos":238494701},"http":{"id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/auth-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b19413e-04b2-47b7-84d1-45562a8b87d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33488","PortSpecifier":{"PortValue":33488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33488","PortSpecifier":{"PortValue":33488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878317,"nanos":279950162},"http":{"id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/auth-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12d51c3f-6f32-43aa-8f8b-56fdc0572e4e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34658","PortSpecifier":{"PortValue":34658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5800453-b717-437a-956b-7e4dd75bb99b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34658","PortSpecifier":{"PortValue":34658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878317,"nanos":322088432},"http":{"id":"d5800453-b717-437a-956b-7e4dd75bb99b","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/auth-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5800453-b717-437a-956b-7e4dd75bb99b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33500","PortSpecifier":{"PortValue":33500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33500","PortSpecifier":{"PortValue":33500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878317,"nanos":359026336},"http":{"id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/auth-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8dfdcd3-19b9-49df-8076-c43af011f75a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55060","PortSpecifier":{"PortValue":55060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55060","PortSpecifier":{"PortValue":55060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878334,"nanos":651170791},"http":{"id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/auth-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07b2df41-9ad3-4468-ba00-02e92c4b4ede","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33580","PortSpecifier":{"PortValue":33580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33580","PortSpecifier":{"PortValue":33580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878334,"nanos":697355275},"http":{"id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/auth-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8d19a32-6669-4392-836b-4f8a9f9c4067","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33592","PortSpecifier":{"PortValue":33592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","method":"GET","path":"/maas-api/v1/api-keys/84ac50d8-0a66-42f3-b239-95c92c33cc62","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33592","PortSpecifier":{"PortValue":33592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878334,"nanos":734318379},"http":{"id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","method":"GET","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/84ac50d8-0a66-42f3-b239-95c92c33cc62",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/84ac50d8-0a66-42f3-b239-95c92c33cc62",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/auth-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"477aa884-56ff-40e4-914e-29a4fa5c5d37","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55074","PortSpecifier":{"PortValue":55074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","method":"GET","path":"/maas-api/v1/api-keys/84ac50d8-0a66-42f3-b239-95c92c33cc62","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55074","PortSpecifier":{"PortValue":55074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878334,"nanos":770579437},"http":{"id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","method":"GET","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/84ac50d8-0a66-42f3-b239-95c92c33cc62",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/84ac50d8-0a66-42f3-b239-95c92c33cc62",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/auth-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b003c662-2292-4fd3-9d24-3fed81edcc1b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23b18544-4bb6-4065-9976-e6662a25a122","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37534","PortSpecifier":{"PortValue":37534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23b18544-4bb6-4065-9976-e6662a25a122","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23b18544-4bb6-4065-9976-e6662a25a122","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37534","PortSpecifier":{"PortValue":37534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878352,"nanos":69174178},"http":{"id":"23b18544-4bb6-4065-9976-e6662a25a122","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23b18544-4bb6-4065-9976-e6662a25a122","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23b18544-4bb6-4065-9976-e6662a25a122","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23b18544-4bb6-4065-9976-e6662a25a122","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23b18544-4bb6-4065-9976-e6662a25a122","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23b18544-4bb6-4065-9976-e6662a25a122","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23b18544-4bb6-4065-9976-e6662a25a122","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/auth-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23b18544-4bb6-4065-9976-e6662a25a122","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23b18544-4bb6-4065-9976-e6662a25a122","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23b18544-4bb6-4065-9976-e6662a25a122","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23b18544-4bb6-4065-9976-e6662a25a122","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23b18544-4bb6-4065-9976-e6662a25a122","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46396","PortSpecifier":{"PortValue":46396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46396","PortSpecifier":{"PortValue":46396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878352,"nanos":104703956},"http":{"id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/auth-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd1961c0-4bc3-47fe-976d-698dff93aae9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37542","PortSpecifier":{"PortValue":37542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37542","PortSpecifier":{"PortValue":37542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878352,"nanos":154012368},"http":{"id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sRrP5qrldKyyV7Iy_prdbky5BExAgqd1nTPRq0sHs5FyJFvW3nGNAQIE3QKC"}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sRrP5qrldKyyV7Iy_prdbky5BExAgqd1nTPRq0sHs5FyJFvW3nGNAQIE3QKC\"}"}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"872c272a-ff85-4188-b72b-ca8ffda3e1e5","keyName":"e2e-auth-iso-a-e6771a","subscription":"e2e-auth-iso-3c5f8d","tenant":"e2e-shared-a-e767e8","userId":"872c272a-ff85-4188-b72b-ca8ffda3e1e5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/auth-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3c5f8d"}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:45:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b6f2605-0980-4fd4-b04f-0e5cc5ba5d73","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:45:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c738f7ce0db7e1c6a09a8fc667d6d7dfb675dc58a6927dd31b4b63fd2ca0e091"}
{"level":"info","ts":"2026-07-12T17:45:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b3a21a7d10853c7f2ef4b0994446d7acd1a768dd845932a9445102f243615b7"}
{"level":"info","ts":"2026-07-12T17:45:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/762b3f3cd7c26e3f3e9d4dea51ce6d697255fa5a7981f5402649578dfe6a679b"}
{"level":"info","ts":"2026-07-12T17:45:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8d2e38fe8a90e2a21816bf9337f3167effd457ce6be64876043fdf68bff63fd"}
{"level":"info","ts":"2026-07-12T17:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16ba232b141a46cd187e3200c7a6588dd333b556bcc55f25e736b7dd26fcf7a4"}
{"level":"info","ts":"2026-07-12T17:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a5fa864a3a5f2250acaad467bc732e76c3982ff4896670b92750c7eb1b5d8b2"}
{"level":"info","ts":"2026-07-12T17:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbae3a5376019bc3d9afaf550c94892a5172dbe715fac2f86e6f6350b09bbb23"}
{"level":"info","ts":"2026-07-12T17:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74c9b43bcccf643a4217ba2f490214e25ae14313ffa3bcf444c2001ea1bba717"}
{"level":"info","ts":"2026-07-12T17:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/807aa442ca79f79df7eb4679d990c3a59d437ea2c05e243956545fddbaecd005"}
{"level":"info","ts":"2026-07-12T17:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f8c5a73951054076dd8b5128e48a86cc226d34e596cc6dcf7e6c74b976664ac"}
{"level":"info","ts":"2026-07-12T17:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f17f76e858fdce0665936c9ace488efa0be2cda51e3c611c542457dbb151a50"}
{"level":"info","ts":"2026-07-12T17:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bbd0f246db25b44e54837e084f251b7cff604a20081af36ded9157b31878945"}
{"level":"info","ts":"2026-07-12T17:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b52889e2932b59b817f0c0d9a21458d2459d4236736fbf0a84795f58230643cc"}
{"level":"info","ts":"2026-07-12T17:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/946d3f9f9b49cc2e9c982507b3c193021b17a805e5fdcbf3df1911c669aaba0e"}
{"level":"info","ts":"2026-07-12T17:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6a8743c13588be682960eea11072948dd3e0f4204bbd89a6cbd99a0193c50be"}
{"level":"info","ts":"2026-07-12T17:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05528fd0ed10ed87839c831556664bccdf86a46e70af76346aaffb56158db2a0"}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab"}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab"}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab"}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6"}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6"}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6"}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c"}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c"}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c"}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5"}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5"}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5"}
{"level":"info","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5"}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5"}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5"}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698"}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698"}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698"}
{"level":"error","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698"}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:46:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:46:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f"}
{"level":"info","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f"}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713"}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713"}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713"}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"}
{"level":"info","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b"}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867"}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b"}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6"}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f"}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc"}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:47:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c"}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"}
{"level":"debug","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:47:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"}
{"level":"info","ts":"2026-07-12T17:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5"}
{"level":"info","ts":"2026-07-12T17:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc"}
{"level":"info","ts":"2026-07-12T17:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"}
{"level":"info","ts":"2026-07-12T17:47:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434"}
{"level":"info","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55854","PortSpecifier":{"PortValue":55854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"147b3efe-3ca5-400d-b173-bb32357674f7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55854","PortSpecifier":{"PortValue":55854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878454,"nanos":88044409},"http":{"id":"147b3efe-3ca5-400d-b173-bb32357674f7","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/sub-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"147b3efe-3ca5-400d-b173-bb32357674f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52876","PortSpecifier":{"PortValue":52876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52876","PortSpecifier":{"PortValue":52876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878454,"nanos":129634478},"http":{"id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/sub-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9b9d322-a92a-4655-8aed-79c9e47d3944","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55858","PortSpecifier":{"PortValue":55858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f21eaf24-9297-407d-8f41-fd8d640758a1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55858","PortSpecifier":{"PortValue":55858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878454,"nanos":169786650},"http":{"id":"f21eaf24-9297-407d-8f41-fd8d640758a1","method":"GET","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-m2AcAC6em7BBYBr4_pca85eKMDRwR1JQMQW6SRXnGUrweIGJuHOeVAUoeQox"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-m2AcAC6em7BBYBr4_pca85eKMDRwR1JQMQW6SRXnGUrweIGJuHOeVAUoeQox\"}"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bf0538e4-6eb5-4253-adf4-45023199dc98","keyName":"e2e-sub-iso-716850","subscription":"e2e-a-only-aa6aa0","tenant":"e2e-shared-a-e767e8","userId":"bf0538e4-6eb5-4253-adf4-45023199dc98","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/sub-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-aa6aa0"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f21eaf24-9297-407d-8f41-fd8d640758a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52878","PortSpecifier":{"PortValue":52878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52878","PortSpecifier":{"PortValue":52878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878454,"nanos":210803172},"http":{"id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","method":"GET","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FWn8GCa0wYHgGMJh_8LvN9zQAW3FN29iKtsDoLAc1CRRbKhxRWAornx1p3Xm"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-9c75b6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FWn8GCa0wYHgGMJh_8LvN9zQAW3FN29iKtsDoLAc1CRRbKhxRWAornx1p3Xm\"}"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9c75b6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"964c20a9-1918-4115-ba47-6c4ba4c00c1f","keyName":"e2e-sub-iso-661a3d","subscription":"e2e-b-only-aa6aa0","tenant":"e2e-shared-b-9c75b6","userId":"964c20a9-1918-4115-ba47-6c4ba4c00c1f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/sub-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-aa6aa0"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:47:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03f7b0da-ccbd-400a-8d51-4b0830ca0019","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59578","PortSpecifier":{"PortValue":59578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59578","PortSpecifier":{"PortValue":59578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878470,"nanos":626012745},"http":{"id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/sub-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"798d76e0-0a19-4bb5-b21c-16a3d0427b12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53498","PortSpecifier":{"PortValue":53498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53498","PortSpecifier":{"PortValue":53498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878470,"nanos":666884357},"http":{"id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/sub-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05e7e55b-5f62-4c9f-80b7-17556a7692dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86d944d7-fc80-4b04-829d-2616b0600726","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59582","PortSpecifier":{"PortValue":59582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86d944d7-fc80-4b04-829d-2616b0600726","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86d944d7-fc80-4b04-829d-2616b0600726","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59582","PortSpecifier":{"PortValue":59582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878470,"nanos":698192515},"http":{"id":"86d944d7-fc80-4b04-829d-2616b0600726","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86d944d7-fc80-4b04-829d-2616b0600726","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16HQruiS5VUjBxy9G_KZoKkXoh3OQ7aBQsexlJY5ZxRw8AJSHdXnaKttAOXz6"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86d944d7-fc80-4b04-829d-2616b0600726","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16HQruiS5VUjBxy9G_KZoKkXoh3OQ7aBQsexlJY5ZxRw8AJSHdXnaKttAOXz6\"}"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86d944d7-fc80-4b04-829d-2616b0600726","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c729688-10e0-4bca-bab7-2c71ad532a38","keyName":"e2e-sub-iso-506f4f","subscription":"e2e-shared-sub-74ec2a","tenant":"e2e-shared-a-e767e8","userId":"4c729688-10e0-4bca-bab7-2c71ad532a38","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86d944d7-fc80-4b04-829d-2616b0600726","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86d944d7-fc80-4b04-829d-2616b0600726","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86d944d7-fc80-4b04-829d-2616b0600726","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86d944d7-fc80-4b04-829d-2616b0600726","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/sub-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86d944d7-fc80-4b04-829d-2616b0600726","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86d944d7-fc80-4b04-829d-2616b0600726","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-74ec2a"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86d944d7-fc80-4b04-829d-2616b0600726","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86d944d7-fc80-4b04-829d-2616b0600726","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86d944d7-fc80-4b04-829d-2616b0600726","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86d944d7-fc80-4b04-829d-2616b0600726","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47598","PortSpecifier":{"PortValue":47598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"494c3932-cca0-4276-9a34-039e5e76bb1c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47598","PortSpecifier":{"PortValue":47598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878470,"nanos":725763602},"http":{"id":"494c3932-cca0-4276-9a34-039e5e76bb1c","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8kX1bltiv3dcv6rN_jK68k7WDvkER74ycFfGosPecHmjzHGrPXHvbD19rhjP"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-9c75b6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8kX1bltiv3dcv6rN_jK68k7WDvkER74ycFfGosPecHmjzHGrPXHvbD19rhjP\"}"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9c75b6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9c77b1c8-9bfb-4c9e-a10b-d25d743cc560","keyName":"e2e-sub-iso-ce1618","subscription":"e2e-shared-sub-74ec2a","tenant":"e2e-shared-b-9c75b6","userId":"9c77b1c8-9bfb-4c9e-a10b-d25d743cc560","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/sub-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-74ec2a"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:47:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"494c3932-cca0-4276-9a34-039e5e76bb1c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa2bd16211bdf8abd1aa859b7c2cfeb7fecf2cd6466675c9ef0b3548d531a698"}
{"level":"info","ts":"2026-07-12T17:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1091d8916419774b83542319295d16990f1452a1920283062af050f3c88fbba0"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63fbd16de9d22785acc4f9a910c565dafafeedcbe48e42913db742fcfd7fc5d6"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff07fb921289b96aa8681fec92e7efaf2396ef9b0eb9f03c5008d773cc77fea5"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3ff6113c4bc38cbcf258caa240cf3d7ed26bbcf7d29117a1b7da6ef5a0edd1f"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be3314db8c9ba24efe386a6deb08d063c37203088c628efd60fcb38500057430"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b3dfd354bae17ec1336ba32238af936b7ebc915bad31993ddf0d955f245bba5"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd630a5bd60c3e702b892ee5926c1dfe7b07e8b1b10e29e4aee68e173a24c5ab"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42fa9cd11d6afbe458c44b54e09c48d1b80b012a6e37e3835120d4b9da43608c"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79a581842f1dc604b953c98517c5e3341b0f7f6519ba05300c2e0f071250b49c"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90e26d35ace0adf27ba82d486352cfc89d9bbf385fa0f05a72f75de03377d7cc"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0386957bc3656e330d26de9975adf63d7b78b0c6001f3170140a76cdb18a7d5"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66c28ef29ff4ebe9069d74a71a43846aa7c63c57386826e95219645e1c55a434"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6848161dbb2b17646d395c51adaedb7ca9890ae63bc54885e4c97deea5740434"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0d934b62e69abbb3e6b33ccfa6dc807fbb0c1c32069ca5dbb7f16ef6edf8c40"}
{"level":"info","ts":"2026-07-12T17:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71fb00e9b99eefc3c179e41b73863b4c99fc1aa8afcf1ff26108c15aad14ecaa"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d"}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"error","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7"}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e"}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e"}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79"}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e"}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79"}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e"}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"error","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e71363b711e50fbec5d7777fe6b0fc295fb734825c66d3267872dea96bd07f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982"}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e71363b711e50fbec5d7777fe6b0fc295fb734825c66d3267872dea96bd07f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e71363b711e50fbec5d7777fe6b0fc295fb734825c66d3267872dea96bd07f"}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e71363b711e50fbec5d7777fe6b0fc295fb734825c66d3267872dea96bd07f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e71363b711e50fbec5d7777fe6b0fc295fb734825c66d3267872dea96bd07f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e71363b711e50fbec5d7777fe6b0fc295fb734825c66d3267872dea96bd07f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982"}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e71363b711e50fbec5d7777fe6b0fc295fb734825c66d3267872dea96bd07f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"error","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e71363b711e50fbec5d7777fe6b0fc295fb734825c66d3267872dea96bd07f"}
{"level":"info","ts":"2026-07-12T17:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982"}
{"level":"debug","ts":"2026-07-12T17:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352"}
{"level":"debug","ts":"2026-07-12T17:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352"}
{"level":"debug","ts":"2026-07-12T17:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f"}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f"}
{"level":"error","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"}
{"level":"error","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32"}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32"}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32"}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8"}
{"level":"info","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32"}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8"}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce"}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce"}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce"}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea"}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce"}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea"}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:48:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce"}
{"level":"info","ts":"2026-07-12T17:48:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20"}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713"}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713"}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:49:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"}
{"level":"debug","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e71363b711e50fbec5d7777fe6b0fc295fb734825c66d3267872dea96bd07f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e"}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e71363b711e50fbec5d7777fe6b0fc295fb734825c66d3267872dea96bd07f"}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea"}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:49:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79"}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce"}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f"}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b"}
{"level":"debug","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7"}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d"}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8"}
{"level":"info","ts":"2026-07-12T17:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32"}
{"level":"info","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55168","PortSpecifier":{"PortValue":55168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55168","PortSpecifier":{"PortValue":55168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878554,"nanos":114617871},"http":{"id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f03396d1-2515-45a8-b495-4c3cb6d9e94c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41820","PortSpecifier":{"PortValue":41820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41820","PortSpecifier":{"PortValue":41820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878554,"nanos":155935327},"http":{"id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/rate-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"250b4142-3a28-4a6b-9d4a-384b68b58dd5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6114ca7b-6426-4114-a556-205182262124","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55176","PortSpecifier":{"PortValue":55176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6114ca7b-6426-4114-a556-205182262124","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6114ca7b-6426-4114-a556-205182262124","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55176","PortSpecifier":{"PortValue":55176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878554,"nanos":199799757},"http":{"id":"6114ca7b-6426-4114-a556-205182262124","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6114ca7b-6426-4114-a556-205182262124","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AxfPwcZH3jS39JRW_LLNX9CwUKjYa3RSeaVgda44AFTH9i5uUME9QISfSULj"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6114ca7b-6426-4114-a556-205182262124","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AxfPwcZH3jS39JRW_LLNX9CwUKjYa3RSeaVgda44AFTH9i5uUME9QISfSULj\"}"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6114ca7b-6426-4114-a556-205182262124","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab455f7b-a0be-4216-9be0-88e2ac66cd87","keyName":"e2e-rate-a-a91163","subscription":"e2e-rate-iso-a-a91163","tenant":"e2e-shared-a-e767e8","userId":"ab455f7b-a0be-4216-9be0-88e2ac66cd87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6114ca7b-6426-4114-a556-205182262124","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-a91163\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6114ca7b-6426-4114-a556-205182262124","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a91163","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6114ca7b-6426-4114-a556-205182262124","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6114ca7b-6426-4114-a556-205182262124","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6114ca7b-6426-4114-a556-205182262124","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6114ca7b-6426-4114-a556-205182262124","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6114ca7b-6426-4114-a556-205182262124","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6114ca7b-6426-4114-a556-205182262124","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6114ca7b-6426-4114-a556-205182262124","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6114ca7b-6426-4114-a556-205182262124","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a91163"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6114ca7b-6426-4114-a556-205182262124","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab455f7b-a0be-4216-9be0-88e2ac66cd87","keyName":"e2e-rate-a-a91163","selected_subscription":"e2e-rate-iso-a-a91163","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-a91163@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a91163","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6114ca7b-6426-4114-a556-205182262124","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6114ca7b-6426-4114-a556-205182262124","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62951ca6-799d-4942-bafb-af814ec011dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55188","PortSpecifier":{"PortValue":55188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62951ca6-799d-4942-bafb-af814ec011dd","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62951ca6-799d-4942-bafb-af814ec011dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55188","PortSpecifier":{"PortValue":55188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878555,"nanos":264856988},"http":{"id":"62951ca6-799d-4942-bafb-af814ec011dd","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AxfPwcZH3jS39JRW_LLNX9CwUKjYa3RSeaVgda44AFTH9i5uUME9QISfSULj"}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AxfPwcZH3jS39JRW_LLNX9CwUKjYa3RSeaVgda44AFTH9i5uUME9QISfSULj\"}"}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab455f7b-a0be-4216-9be0-88e2ac66cd87","keyName":"e2e-rate-a-a91163","subscription":"e2e-rate-iso-a-a91163","tenant":"e2e-shared-a-e767e8","userId":"ab455f7b-a0be-4216-9be0-88e2ac66cd87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-a91163\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a91163","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62951ca6-799d-4942-bafb-af814ec011dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a91163"}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62951ca6-799d-4942-bafb-af814ec011dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab455f7b-a0be-4216-9be0-88e2ac66cd87","keyName":"e2e-rate-a-a91163","selected_subscription":"e2e-rate-iso-a-a91163","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-a91163@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a91163","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62951ca6-799d-4942-bafb-af814ec011dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62951ca6-799d-4942-bafb-af814ec011dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55200","PortSpecifier":{"PortValue":55200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39444086-5baf-494d-aa98-9d4f40b5a838","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55200","PortSpecifier":{"PortValue":55200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878556,"nanos":306553319},"http":{"id":"39444086-5baf-494d-aa98-9d4f40b5a838","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AxfPwcZH3jS39JRW_LLNX9CwUKjYa3RSeaVgda44AFTH9i5uUME9QISfSULj"}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AxfPwcZH3jS39JRW_LLNX9CwUKjYa3RSeaVgda44AFTH9i5uUME9QISfSULj\"}"}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab455f7b-a0be-4216-9be0-88e2ac66cd87","keyName":"e2e-rate-a-a91163","subscription":"e2e-rate-iso-a-a91163","tenant":"e2e-shared-a-e767e8","userId":"ab455f7b-a0be-4216-9be0-88e2ac66cd87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-a91163\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a91163","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a91163"}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab455f7b-a0be-4216-9be0-88e2ac66cd87","keyName":"e2e-rate-a-a91163","selected_subscription":"e2e-rate-iso-a-a91163","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-a91163@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a91163","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39444086-5baf-494d-aa98-9d4f40b5a838","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36992","PortSpecifier":{"PortValue":36992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36992","PortSpecifier":{"PortValue":36992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878562,"nanos":957094355},"http":{"id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d361bc12-6659-49c5-9a4a-1c8dc1747812","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59954","PortSpecifier":{"PortValue":59954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59954","PortSpecifier":{"PortValue":59954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878562,"nanos":991006136},"http":{"id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"66817a8d-263f-4662-9c0d-186844a265e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"]}}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b1d109f73dbe"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e8ee4909-453c-493d-b777-71114a7c5e6c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"66817a8d-263f-4662-9c0d-186844a265e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/rate-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72d1b61b-cd9a-4ea6-a0cb-66fc235c0b08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36996","PortSpecifier":{"PortValue":36996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36996","PortSpecifier":{"PortValue":36996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878563,"nanos":27646570},"http":{"id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs"}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs\"}"}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","subscription":"e2e-rate-iso-a-8c4dfe","tenant":"e2e-shared-a-e767e8","userId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-8c4dfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c4dfe"}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","selected_subscription":"e2e-rate-iso-a-8c4dfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-8c4dfe@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42569bdd-4eab-46c4-bf3f-0c6c64ebfbd7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37004","PortSpecifier":{"PortValue":37004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37004","PortSpecifier":{"PortValue":37004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878564,"nanos":68130642},"http":{"id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs"}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs\"}"}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","subscription":"e2e-rate-iso-a-8c4dfe","tenant":"e2e-shared-a-e767e8","userId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-8c4dfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c4dfe"}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","selected_subscription":"e2e-rate-iso-a-8c4dfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-8c4dfe@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29a0bfcd-0f8a-4ba9-abd4-59d83164f6e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37008","PortSpecifier":{"PortValue":37008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37008","PortSpecifier":{"PortValue":37008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878565,"nanos":103468556},"http":{"id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs"}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs\"}"}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","subscription":"e2e-rate-iso-a-8c4dfe","tenant":"e2e-shared-a-e767e8","userId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-8c4dfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c4dfe"}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","selected_subscription":"e2e-rate-iso-a-8c4dfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-8c4dfe@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67e26d6b-7b44-424c-841c-e5ce4309b7fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37022","PortSpecifier":{"PortValue":37022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37022","PortSpecifier":{"PortValue":37022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878566,"nanos":151850806},"http":{"id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs"}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs\"}"}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","subscription":"e2e-rate-iso-a-8c4dfe","tenant":"e2e-shared-a-e767e8","userId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-8c4dfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c4dfe"}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","selected_subscription":"e2e-rate-iso-a-8c4dfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-8c4dfe@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25d759b9-7572-43a5-a4b8-f88825d7d71c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37034","PortSpecifier":{"PortValue":37034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2dca724-bcec-431b-ba81-e3fd8240414f","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37034","PortSpecifier":{"PortValue":37034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878567,"nanos":183784574},"http":{"id":"f2dca724-bcec-431b-ba81-e3fd8240414f","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs"}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs\"}"}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","subscription":"e2e-rate-iso-a-8c4dfe","tenant":"e2e-shared-a-e767e8","userId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-8c4dfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c4dfe"}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","selected_subscription":"e2e-rate-iso-a-8c4dfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-8c4dfe@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2dca724-bcec-431b-ba81-e3fd8240414f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37046","PortSpecifier":{"PortValue":37046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47f900e2-dff2-42c6-a172-e34ddc290230","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37046","PortSpecifier":{"PortValue":37046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878568,"nanos":229689231},"http":{"id":"47f900e2-dff2-42c6-a172-e34ddc290230","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs"}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs\"}"}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","subscription":"e2e-rate-iso-a-8c4dfe","tenant":"e2e-shared-a-e767e8","userId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-8c4dfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c4dfe"}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","selected_subscription":"e2e-rate-iso-a-8c4dfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-8c4dfe@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47f900e2-dff2-42c6-a172-e34ddc290230","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37054","PortSpecifier":{"PortValue":37054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37054","PortSpecifier":{"PortValue":37054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878569,"nanos":267164063},"http":{"id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs"}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs\"}"}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","subscription":"e2e-rate-iso-a-8c4dfe","tenant":"e2e-shared-a-e767e8","userId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-8c4dfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c4dfe"}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","selected_subscription":"e2e-rate-iso-a-8c4dfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-8c4dfe@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87e57a7a-908e-454c-80d6-c5c7440d55ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"991e95a3-7711-4b29-b047-d64298185aac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37062","PortSpecifier":{"PortValue":37062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"991e95a3-7711-4b29-b047-d64298185aac","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"991e95a3-7711-4b29-b047-d64298185aac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37062","PortSpecifier":{"PortValue":37062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878570,"nanos":310525656},"http":{"id":"991e95a3-7711-4b29-b047-d64298185aac","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs"}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs\"}"}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","subscription":"e2e-rate-iso-a-8c4dfe","tenant":"e2e-shared-a-e767e8","userId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-8c4dfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"991e95a3-7711-4b29-b047-d64298185aac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c4dfe"}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"991e95a3-7711-4b29-b047-d64298185aac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","selected_subscription":"e2e-rate-iso-a-8c4dfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-8c4dfe@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"991e95a3-7711-4b29-b047-d64298185aac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"991e95a3-7711-4b29-b047-d64298185aac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48534","PortSpecifier":{"PortValue":48534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48534","PortSpecifier":{"PortValue":48534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878571,"nanos":356077713},"http":{"id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs"}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs\"}"}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","subscription":"e2e-rate-iso-a-8c4dfe","tenant":"e2e-shared-a-e767e8","userId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-8c4dfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c4dfe"}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","selected_subscription":"e2e-rate-iso-a-8c4dfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-8c4dfe@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c92bb92-d0b5-4228-a32f-77cb05e32bd4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48538","PortSpecifier":{"PortValue":48538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48538","PortSpecifier":{"PortValue":48538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878572,"nanos":394616004},"http":{"id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs"}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs\"}"}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","subscription":"e2e-rate-iso-a-8c4dfe","tenant":"e2e-shared-a-e767e8","userId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-8c4dfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c4dfe"}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","selected_subscription":"e2e-rate-iso-a-8c4dfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-8c4dfe@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"168daa47-3683-4cf2-b128-5c0fb00ec1c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48546","PortSpecifier":{"PortValue":48546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","method":"POST","path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions","host":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48546","PortSpecifier":{"PortValue":48546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878573,"nanos":431875515},"http":{"id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","method":"POST","headers":{":authority":"e2e-shared-a-e767e8.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FVDzSOuyZBhiMEQm_hYLtrzhommdTJcZAcXWDHm8700OtOR5gkIb5zz0KCAs\"}"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","subscription":"e2e-rate-iso-a-8c4dfe","tenant":"e2e-shared-a-e767e8","userId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\",\"requestedSubscription\":\"e2e-rate-iso-a-8c4dfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e767e8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c4dfe"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fc347fff-03a7-43b5-bd39-01fa796c9f09","keyName":"e2e-rate-a-8c4dfe","selected_subscription":"e2e-rate-iso-a-8c4dfe","selected_subscription_key":"ai-tenant-e2e-shared-a-e767e8/e2e-rate-iso-a-8c4dfe@ai-tenant-e2e-shared-a-e767e8/rate-test-model-e767e8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e767e8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c4dfe","namespace":"ai-tenant-e2e-shared-a-e767e8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00cb6fc4-4867-4987-926d-5234ccc2ef2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56036","PortSpecifier":{"PortValue":56036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","method":"POST","path":"/ai-tenant-e2e-shared-b-9c75b6/rate-test-model-9c75b6/v1/completions","host":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56036","PortSpecifier":{"PortValue":56036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783878573,"nanos":473708601},"http":{"id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","method":"POST","headers":{":authority":"e2e-shared-b-9c75b6.apps.db5da04c-c273-402f-97bd-b1d109f73dbe.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-9c75b6/rate-test-model-9c75b6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-skTaeSh8jnJliTOB_8Z2kk2LfG5R1pF3azno4v2gKN99jH3jkyvVgrFpsxiQ"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-9c75b6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-skTaeSh8jnJliTOB_8Z2kk2LfG5R1pF3azno4v2gKN99jH3jkyvVgrFpsxiQ\"}"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9c75b6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"73e4d73f-9b43-4eb6-988e-2cc81819ba8b","keyName":"e2e-rate-b-8c4dfe","subscription":"e2e-rate-iso-b-8c4dfe","tenant":"e2e-shared-b-9c75b6","userId":"73e4d73f-9b43-4eb6-988e-2cc81819ba8b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-9c75b6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-9c75b6/rate-test-model-9c75b6\",\"requestedSubscription\":\"e2e-rate-iso-b-8c4dfe\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9c75b6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9c75b6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8c4dfe","namespace":"ai-tenant-e2e-shared-b-9c75b6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9c75b6/rate-test-model-9c75b6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8c4dfe"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"73e4d73f-9b43-4eb6-988e-2cc81819ba8b","keyName":"e2e-rate-b-8c4dfe","selected_subscription":"e2e-rate-iso-b-8c4dfe","selected_subscription_key":"ai-tenant-e2e-shared-b-9c75b6/e2e-rate-iso-b-8c4dfe@ai-tenant-e2e-shared-b-9c75b6/rate-test-model-9c75b6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9c75b6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8c4dfe","namespace":"ai-tenant-e2e-shared-b-9c75b6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:49:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f55f856-8efd-46bb-97a8-b48f3fa636e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5587a9ce5197a55f8e8eeeb4b68081c965eae76e62ac86abed6ff3544603bfea"}
{"level":"info","ts":"2026-07-12T17:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42824faa8ef9ce8634e38fcde625cc0affc44f2ce5064ca8ca085cc81d056dc8"}
{"level":"info","ts":"2026-07-12T17:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3870a0bd1a0a97384fa467572a11f3e02bf8a38a9d98723ef83a08c988962d32"}
{"level":"info","ts":"2026-07-12T17:49:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98d83a974a5836b9d16ec8635ad8fa6bf5d47473a669515ffd6a98c2ff0e5eac"}
{"level":"info","ts":"2026-07-12T17:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9de63cf6884823a39c2ec2f79049ba9bd3227decf3c95c05f8b6d963d04af2e"}
{"level":"info","ts":"2026-07-12T17:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99e71363b711e50fbec5d7777fe6b0fc295fb734825c66d3267872dea96bd07f"}
{"level":"info","ts":"2026-07-12T17:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8704cfd0632d82d1c8c0b1eebf1ebede066b2c1b57582608e84c1b94adf6072"}
{"level":"info","ts":"2026-07-12T17:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/984fd75a65a0e77415b063290b2abc1daa53af714b9533ddee01b1c43145358f"}
{"level":"info","ts":"2026-07-12T17:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e1b3bf3b52cd0d0f6ab483cfa3ccf8ad433ddefd74390fc72b7a969850a0c3b"}
{"level":"info","ts":"2026-07-12T17:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ef053e69c78e9863c84592ca3707d0ffe3a2cd32717b1f232b8a0f1380c32ce"}
{"level":"info","ts":"2026-07-12T17:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85d14f21d9367f3228e484977cef8644720e80f9eaf3106a764e194460a1c982"}
{"level":"info","ts":"2026-07-12T17:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1ba5aa45d8dfe56fdda674513b6d4ca962ab16bf8434d558834be00a8574ff7"}
{"level":"info","ts":"2026-07-12T17:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8043f6aaabd3940b6eefd261e1505fa985cf67695a124037ed5ae0e39c36c61d"}
{"level":"info","ts":"2026-07-12T17:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe067611c0b9207ddfc214509838608d5dc95606a0776fb167b502c11223fa79"}
{"level":"info","ts":"2026-07-12T17:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1762d6ef756701a27e0549c283bbfc5f66432bdc3192fdfe34f1e27fcf832352"}
{"level":"info","ts":"2026-07-12T17:49:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9bdc292a00872a5fa01b862039e407ab95ff4c9ac1bb4b3ee8437b49d8ccd5b"}
{"level":"info","ts":"2026-07-12T17:50:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2470e50fa5bfaa8ee384f273179da8cfc447b6cf809884965dd546f8ccc3dd6b"}
{"level":"info","ts":"2026-07-12T17:50:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9194712a517886f72a10e4d8f14af7818866e40ec5a823586d546b011036c713"}
{"level":"info","ts":"2026-07-12T17:50:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71210242ee9ed9be15b55eff2fe2874ee53af8479921d1ab7160fbfc479c7f5e"}
{"level":"info","ts":"2026-07-12T17:50:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97c3dfba06711beb6782c4c187b038fb8d8748001c4029d910c807ffff303f20"}
{"level":"info","ts":"2026-07-12T17:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/174dec1fe9de01996bf7066e3d3bdce3ad7dc6de706f2cdc26c7aac48382c1e7"}
{"level":"info","ts":"2026-07-12T17:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/894cfaf2fef166c36620130799bdafd9c6d9e7d82911b386ca22fb19c756a073"}
{"level":"info","ts":"2026-07-12T17:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aeaeeddfba5e4947acf795be2b24a99416d1ed3cf84973e9f9d5ef457c3431dc"}
{"level":"info","ts":"2026-07-12T17:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f742118059d0bf2535a029a8f62442c4d3cf638b05ef7f4ab5364f7daa73c867"}