--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-06T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a60c3e90acc07526eac28ce572d7750780597d1f2b55cb7a2774e7c5617c4798"}
{"level":"info","ts":"2026-07-06T22:58:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e1d473c15ce3d967a7d29bbd82292534ed73412d975f25aac277475efb7a61f"}
{"level":"info","ts":"2026-07-06T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fa770f8952608f1f4f72a2b0d3c96dd5f2d5750e0fea0fc3ea24c1958160ec4"}
{"level":"info","ts":"2026-07-06T22:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/419437014a2712dee9c26ddc9708241a31077139bf67de3faf363b20bf97ca69"}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d"}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d"}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d"}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d"}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"832e81f6b512d926269b34c31d7187c800e28c984d5f188a1cffedf904f57f8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d"}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"832e81f6b512d926269b34c31d7187c800e28c984d5f188a1cffedf904f57f8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"832e81f6b512d926269b34c31d7187c800e28c984d5f188a1cffedf904f57f8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"832e81f6b512d926269b34c31d7187c800e28c984d5f188a1cffedf904f57f8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"832e81f6b512d926269b34c31d7187c800e28c984d5f188a1cffedf904f57f8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/832e81f6b512d926269b34c31d7187c800e28c984d5f188a1cffedf904f57f8c"}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"832e81f6b512d926269b34c31d7187c800e28c984d5f188a1cffedf904f57f8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["832e81f6b512d926269b34c31d7187c800e28c984d5f188a1cffedf904f57f8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"832e81f6b512d926269b34c31d7187c800e28c984d5f188a1cffedf904f57f8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"832e81f6b512d926269b34c31d7187c800e28c984d5f188a1cffedf904f57f8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d"}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/832e81f6b512d926269b34c31d7187c800e28c984d5f188a1cffedf904f57f8c"}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9"}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9"}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781e50db78da3ae68f70deb03e53085212910eb6839ddfd72743d09f5c4dc48e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9"}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781e50db78da3ae68f70deb03e53085212910eb6839ddfd72743d09f5c4dc48e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781e50db78da3ae68f70deb03e53085212910eb6839ddfd72743d09f5c4dc48e"}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781e50db78da3ae68f70deb03e53085212910eb6839ddfd72743d09f5c4dc48e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781e50db78da3ae68f70deb03e53085212910eb6839ddfd72743d09f5c4dc48e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781e50db78da3ae68f70deb03e53085212910eb6839ddfd72743d09f5c4dc48e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94"}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781e50db78da3ae68f70deb03e53085212910eb6839ddfd72743d09f5c4dc48e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9"}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781e50db78da3ae68f70deb03e53085212910eb6839ddfd72743d09f5c4dc48e"}
{"level":"info","ts":"2026-07-06T23:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94"}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01"}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01"}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01"}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f93a2605a8b7f126d26a88bded43a22ff7983fe9a4dd2f96d34b975bf6f63387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f93a2605a8b7f126d26a88bded43a22ff7983fe9a4dd2f96d34b975bf6f63387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541"}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab4c08ee0ff4751199164fd21c005451bdffc8461844e340c5951b3338c49098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab4c08ee0ff4751199164fd21c005451bdffc8461844e340c5951b3338c49098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f93a2605a8b7f126d26a88bded43a22ff7983fe9a4dd2f96d34b975bf6f63387"}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f93a2605a8b7f126d26a88bded43a22ff7983fe9a4dd2f96d34b975bf6f63387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f93a2605a8b7f126d26a88bded43a22ff7983fe9a4dd2f96d34b975bf6f63387"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01"}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f93a2605a8b7f126d26a88bded43a22ff7983fe9a4dd2f96d34b975bf6f63387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab4c08ee0ff4751199164fd21c005451bdffc8461844e340c5951b3338c49098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab4c08ee0ff4751199164fd21c005451bdffc8461844e340c5951b3338c49098","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab4c08ee0ff4751199164fd21c005451bdffc8461844e340c5951b3338c49098"}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541"}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f93a2605a8b7f126d26a88bded43a22ff7983fe9a4dd2f96d34b975bf6f63387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab4c08ee0ff4751199164fd21c005451bdffc8461844e340c5951b3338c49098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab4c08ee0ff4751199164fd21c005451bdffc8461844e340c5951b3338c49098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab4c08ee0ff4751199164fd21c005451bdffc8461844e340c5951b3338c49098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab4c08ee0ff4751199164fd21c005451bdffc8461844e340c5951b3338c49098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f93a2605a8b7f126d26a88bded43a22ff7983fe9a4dd2f96d34b975bf6f63387"}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab4c08ee0ff4751199164fd21c005451bdffc8461844e340c5951b3338c49098"}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541"}
{"level":"info","ts":"2026-07-06T23:00:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"}
{"level":"info","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47870","PortSpecifier":{"PortValue":47870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87d10290-2fca-4305-8e0d-b9c26da3f339","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47870","PortSpecifier":{"PortValue":47870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378839,"nanos":501246050},"http":{"id":"87d10290-2fca-4305-8e0d-b9c26da3f339","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/auth-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:00:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87d10290-2fca-4305-8e0d-b9c26da3f339","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac7dea48c31497ee60bdbc67df9ec9bfc14c3ea60d8dc2d637d4f694cb3311d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac7dea48c31497ee60bdbc67df9ec9bfc14c3ea60d8dc2d637d4f694cb3311d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac7dea48c31497ee60bdbc67df9ec9bfc14c3ea60d8dc2d637d4f694cb3311d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac7dea48c31497ee60bdbc67df9ec9bfc14c3ea60d8dc2d637d4f694cb3311d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac7dea48c31497ee60bdbc67df9ec9bfc14c3ea60d8dc2d637d4f694cb3311d"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eac7dea48c31497ee60bdbc67df9ec9bfc14c3ea60d8dc2d637d4f694cb3311d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eac7dea48c31497ee60bdbc67df9ec9bfc14c3ea60d8dc2d637d4f694cb3311d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eac7dea48c31497ee60bdbc67df9ec9bfc14c3ea60d8dc2d637d4f694cb3311d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eac7dea48c31497ee60bdbc67df9ec9bfc14c3ea60d8dc2d637d4f694cb3311d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eac7dea48c31497ee60bdbc67df9ec9bfc14c3ea60d8dc2d637d4f694cb3311d"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"}
{"level":"debug","ts":"2026-07-06T23:00:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1"}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"}
{"level":"error","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:00:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:00:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"}
{"level":"info","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59872","PortSpecifier":{"PortValue":59872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59872","PortSpecifier":{"PortValue":59872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378852,"nanos":433494779},"http":{"id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/auth-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92afa8a7-b190-4a06-8070-ce660fbf7e44","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39678","PortSpecifier":{"PortValue":39678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39678","PortSpecifier":{"PortValue":39678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378852,"nanos":476916988},"http":{"id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","method":"POST","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/auth-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb4cc885-24e3-4a4a-8d69-5e1950a38f4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59880","PortSpecifier":{"PortValue":59880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d88b08f-a3d8-4354-859e-ac168c14a758","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59880","PortSpecifier":{"PortValue":59880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378852,"nanos":537260139},"http":{"id":"1d88b08f-a3d8-4354-859e-ac168c14a758","method":"GET","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xS18gAsiz7NAp7M7_7WL5Mvy5if7VPNuNs4NSVujR7qIiXUCTqL2D38XOljn"}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xS18gAsiz7NAp7M7_7WL5Mvy5if7VPNuNs4NSVujR7qIiXUCTqL2D38XOljn\"}"}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"371f0791-7be1-46fe-aabf-1b2df4292b46","keyName":"e2e-auth-iso-a-76a562","subscription":"e2e-auth-iso-2a13ac","tenant":"e2e-shared-a-c8326f","userId":"371f0791-7be1-46fe-aabf-1b2df4292b46","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/auth-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-2a13ac"}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:00:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d88b08f-a3d8-4354-859e-ac168c14a758","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36362","PortSpecifier":{"PortValue":36362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36362","PortSpecifier":{"PortValue":36362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378866,"nanos":272770886},"http":{"id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/auth-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dcab5e9-d205-4a65-8795-e79a175a1a1f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48122","PortSpecifier":{"PortValue":48122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88e46bbd-aef7-4322-aa23-882e072ec18f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48122","PortSpecifier":{"PortValue":48122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378866,"nanos":321287089},"http":{"id":"88e46bbd-aef7-4322-aa23-882e072ec18f","method":"POST","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/auth-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88e46bbd-aef7-4322-aa23-882e072ec18f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7db04d15-4510-4e6b-bf08-7999b61de718","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48124","PortSpecifier":{"PortValue":48124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7db04d15-4510-4e6b-bf08-7999b61de718","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7db04d15-4510-4e6b-bf08-7999b61de718","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48124","PortSpecifier":{"PortValue":48124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378866,"nanos":371707013},"http":{"id":"7db04d15-4510-4e6b-bf08-7999b61de718","method":"GET","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7db04d15-4510-4e6b-bf08-7999b61de718","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VXhDdxkCImzgE1pp_M4Ixll9AeGrXL3BmoJ0C2iJYikA1b8mDD71XEa6hfv"}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7db04d15-4510-4e6b-bf08-7999b61de718","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b0de62.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VXhDdxkCImzgE1pp_M4Ixll9AeGrXL3BmoJ0C2iJYikA1b8mDD71XEa6hfv\"}"}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7db04d15-4510-4e6b-bf08-7999b61de718","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b0de62.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7db04d15-4510-4e6b-bf08-7999b61de718","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db04d15-4510-4e6b-bf08-7999b61de718","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"7db04d15-4510-4e6b-bf08-7999b61de718","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7db04d15-4510-4e6b-bf08-7999b61de718","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T23:01:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7db04d15-4510-4e6b-bf08-7999b61de718","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44936","PortSpecifier":{"PortValue":44936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdcbc517-7c98-4961-818b-e8ad0648915d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44936","PortSpecifier":{"PortValue":44936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378879,"nanos":214967520},"http":{"id":"fdcbc517-7c98-4961-818b-e8ad0648915d","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/auth-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdcbc517-7c98-4961-818b-e8ad0648915d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40724","PortSpecifier":{"PortValue":40724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f18127dc-9588-4e70-9421-43a45e2746bb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40724","PortSpecifier":{"PortValue":40724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378879,"nanos":256124805},"http":{"id":"f18127dc-9588-4e70-9421-43a45e2746bb","method":"POST","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/auth-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f18127dc-9588-4e70-9421-43a45e2746bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c10aead9-52ea-4046-b954-2e32f5929703","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44940","PortSpecifier":{"PortValue":44940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c10aead9-52ea-4046-b954-2e32f5929703","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c10aead9-52ea-4046-b954-2e32f5929703","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44940","PortSpecifier":{"PortValue":44940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378879,"nanos":301069466},"http":{"id":"c10aead9-52ea-4046-b954-2e32f5929703","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c10aead9-52ea-4046-b954-2e32f5929703","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c10aead9-52ea-4046-b954-2e32f5929703","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c10aead9-52ea-4046-b954-2e32f5929703","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c10aead9-52ea-4046-b954-2e32f5929703","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c10aead9-52ea-4046-b954-2e32f5929703","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c10aead9-52ea-4046-b954-2e32f5929703","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/auth-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c10aead9-52ea-4046-b954-2e32f5929703","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c10aead9-52ea-4046-b954-2e32f5929703","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c10aead9-52ea-4046-b954-2e32f5929703","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c10aead9-52ea-4046-b954-2e32f5929703","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c10aead9-52ea-4046-b954-2e32f5929703","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40732","PortSpecifier":{"PortValue":40732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c03e895-449f-991f-9c0e-cf20eca3229b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40732","PortSpecifier":{"PortValue":40732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378879,"nanos":338199608},"http":{"id":"5c03e895-449f-991f-9c0e-cf20eca3229b","method":"POST","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/auth-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c03e895-449f-991f-9c0e-cf20eca3229b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37978","PortSpecifier":{"PortValue":37978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37978","PortSpecifier":{"PortValue":37978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378901,"nanos":466164765},"http":{"id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/auth-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7565bbba-1262-4d73-9709-6e2dcbbcd9dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1154673-1cbf-4b52-998d-693c142eec13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32924","PortSpecifier":{"PortValue":32924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1154673-1cbf-4b52-998d-693c142eec13","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1154673-1cbf-4b52-998d-693c142eec13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32924","PortSpecifier":{"PortValue":32924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378901,"nanos":508106795},"http":{"id":"e1154673-1cbf-4b52-998d-693c142eec13","method":"POST","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1154673-1cbf-4b52-998d-693c142eec13","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1154673-1cbf-4b52-998d-693c142eec13","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1154673-1cbf-4b52-998d-693c142eec13","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1154673-1cbf-4b52-998d-693c142eec13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1154673-1cbf-4b52-998d-693c142eec13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1154673-1cbf-4b52-998d-693c142eec13","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/auth-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1154673-1cbf-4b52-998d-693c142eec13","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1154673-1cbf-4b52-998d-693c142eec13","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1154673-1cbf-4b52-998d-693c142eec13","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1154673-1cbf-4b52-998d-693c142eec13","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1154673-1cbf-4b52-998d-693c142eec13","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32934","PortSpecifier":{"PortValue":32934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","method":"GET","path":"/maas-api/v1/api-keys/b9d9dd93-1ba6-40e8-8c53-928eee1b631b","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32934","PortSpecifier":{"PortValue":32934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378901,"nanos":547279075},"http":{"id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","method":"GET","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b9d9dd93-1ba6-40e8-8c53-928eee1b631b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b9d9dd93-1ba6-40e8-8c53-928eee1b631b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/auth-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c6b4c77-ed70-42e0-a512-a6a9c5e6598e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37988","PortSpecifier":{"PortValue":37988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","method":"GET","path":"/maas-api/v1/api-keys/b9d9dd93-1ba6-40e8-8c53-928eee1b631b","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37988","PortSpecifier":{"PortValue":37988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378901,"nanos":585677146},"http":{"id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","method":"GET","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b9d9dd93-1ba6-40e8-8c53-928eee1b631b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b9d9dd93-1ba6-40e8-8c53-928eee1b631b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/auth-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b76acd0-3cb2-40f2-bf5a-5ab5c41e82d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42272","PortSpecifier":{"PortValue":42272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42272","PortSpecifier":{"PortValue":42272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378918,"nanos":609242042},"http":{"id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/auth-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f73a0a5-d93e-415d-910e-dfddc1b2b683","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46210","PortSpecifier":{"PortValue":46210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46210","PortSpecifier":{"PortValue":46210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378918,"nanos":644864811},"http":{"id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","method":"POST","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/auth-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"623cb12b-6cf4-4dda-bf49-b8d3a0727266","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42288","PortSpecifier":{"PortValue":42288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42288","PortSpecifier":{"PortValue":42288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378918,"nanos":685630470},"http":{"id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-D9GAZR1LRX0v0ueO_dwjrMIV5jPwwK3qQ0Sj66pwp5b3WS9I1S2dIp93HLzM"}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-D9GAZR1LRX0v0ueO_dwjrMIV5jPwwK3qQ0Sj66pwp5b3WS9I1S2dIp93HLzM\"}"}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f774b55f-96bb-4e51-960c-f6acf42ec365","keyName":"e2e-auth-iso-a-f2f6a9","subscription":"e2e-auth-iso-5099c6","tenant":"e2e-shared-a-c8326f","userId":"f774b55f-96bb-4e51-960c-f6acf42ec365","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/auth-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5099c6"}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8597d0c0-2838-42ff-b3ed-0b81699d6c67","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:02:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d7403ae8fe41fdacbc6b899de9fd7ffeb2d8bdab6ecae99aa23062834ffce94"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f93a2605a8b7f126d26a88bded43a22ff7983fe9a4dd2f96d34b975bf6f63387"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0381359dc5b4b94473f0e54ea7d47d7308476657df9b39a27e7cb283de3f4e1d"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2657b0c1bd37832dc7a15a3db48763632e32e88247f9b00e5603036011931fc9"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b7dacbf524a4c4e1c79ee644eee869760131e894d3842402f4d05fba1cbb7a1"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ea95dcd6d9ec72b93b9651639ed8db53df2a716bbd22add691950b874ca990a"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37b10f39550e46638ddbdbce9c749240331cefb15f30e50271947e85ee2662ba"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7eb53abafa796da81b644412da2cc635e551e61424505accf7c9d15959c5ee96"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/781e50db78da3ae68f70deb03e53085212910eb6839ddfd72743d09f5c4dc48e"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01abfe2e1216d6c7915c17dea2807ba22508593314b8fe19d646440e0b276d01"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab4c08ee0ff4751199164fd21c005451bdffc8461844e340c5951b3338c49098"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc4331d8f6ce1e5731de2e0a8d22ac5296a17581359789f7dbc015eafcde2d6d"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eac7dea48c31497ee60bdbc67df9ec9bfc14c3ea60d8dc2d637d4f694cb3311d"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/832e81f6b512d926269b34c31d7187c800e28c984d5f188a1cffedf904f57f8c"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48ccef0322521d7fab40f4739e9cdf89e3d0063421d3aacef23b5318286af3fa"}
{"level":"info","ts":"2026-07-06T23:02:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f47e6205b1b9508ea862d03824ef68ccd74c64104faee585e3a1921f54836537"}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a"}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a"}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a"}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a"}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a"}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a"}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3"}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"}
{"level":"error","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a"}
{"level":"info","ts":"2026-07-06T23:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e5722e0e23c3edc3b06e7a68d305d0e1d612b061444b8d8fa9013c6c0905d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e5722e0e23c3edc3b06e7a68d305d0e1d612b061444b8d8fa9013c6c0905d6f"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e5722e0e23c3edc3b06e7a68d305d0e1d612b061444b8d8fa9013c6c0905d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e5722e0e23c3edc3b06e7a68d305d0e1d612b061444b8d8fa9013c6c0905d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e5722e0e23c3edc3b06e7a68d305d0e1d612b061444b8d8fa9013c6c0905d6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e5722e0e23c3edc3b06e7a68d305d0e1d612b061444b8d8fa9013c6c0905d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e5722e0e23c3edc3b06e7a68d305d0e1d612b061444b8d8fa9013c6c0905d6f"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e5722e0e23c3edc3b06e7a68d305d0e1d612b061444b8d8fa9013c6c0905d6f"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e5722e0e23c3edc3b06e7a68d305d0e1d612b061444b8d8fa9013c6c0905d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"659a213b02d866c032cf55da792e904b2e35ab275d2e7d489c08ee80a34766e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/659a213b02d866c032cf55da792e904b2e35ab275d2e7d489c08ee80a34766e2"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"659a213b02d866c032cf55da792e904b2e35ab275d2e7d489c08ee80a34766e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"659a213b02d866c032cf55da792e904b2e35ab275d2e7d489c08ee80a34766e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["659a213b02d866c032cf55da792e904b2e35ab275d2e7d489c08ee80a34766e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"659a213b02d866c032cf55da792e904b2e35ab275d2e7d489c08ee80a34766e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/659a213b02d866c032cf55da792e904b2e35ab275d2e7d489c08ee80a34766e2"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"659a213b02d866c032cf55da792e904b2e35ab275d2e7d489c08ee80a34766e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/659a213b02d866c032cf55da792e904b2e35ab275d2e7d489c08ee80a34766e2"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176"}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6"}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176"}
{"level":"info","ts":"2026-07-06T23:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6"}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176"}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b"}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541"}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e5722e0e23c3edc3b06e7a68d305d0e1d612b061444b8d8fa9013c6c0905d6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e5722e0e23c3edc3b06e7a68d305d0e1d612b061444b8d8fa9013c6c0905d6f"}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:02:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"659a213b02d866c032cf55da792e904b2e35ab275d2e7d489c08ee80a34766e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/659a213b02d866c032cf55da792e904b2e35ab275d2e7d489c08ee80a34766e2"}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:02:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:02:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35"}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6"}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3"}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f"}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a"}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a"}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"}
{"level":"debug","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f"}
{"level":"info","ts":"2026-07-06T23:02:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"}
{"level":"info","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e152c374-a698-4913-8c9d-781125690da4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33078","PortSpecifier":{"PortValue":33078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e152c374-a698-4913-8c9d-781125690da4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e152c374-a698-4913-8c9d-781125690da4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33078","PortSpecifier":{"PortValue":33078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378979,"nanos":465604678},"http":{"id":"e152c374-a698-4913-8c9d-781125690da4","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e152c374-a698-4913-8c9d-781125690da4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e152c374-a698-4913-8c9d-781125690da4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e152c374-a698-4913-8c9d-781125690da4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e152c374-a698-4913-8c9d-781125690da4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e152c374-a698-4913-8c9d-781125690da4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e152c374-a698-4913-8c9d-781125690da4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/sub-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e152c374-a698-4913-8c9d-781125690da4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e152c374-a698-4913-8c9d-781125690da4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e152c374-a698-4913-8c9d-781125690da4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e152c374-a698-4913-8c9d-781125690da4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e152c374-a698-4913-8c9d-781125690da4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33594","PortSpecifier":{"PortValue":33594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33594","PortSpecifier":{"PortValue":33594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378979,"nanos":509649749},"http":{"id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","method":"POST","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/sub-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e658e43f-ed6e-4e77-b003-dc0d2849c324","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33090","PortSpecifier":{"PortValue":33090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33090","PortSpecifier":{"PortValue":33090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378979,"nanos":556132479},"http":{"id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","method":"GET","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HXq6pO8IERxukTV6_GEG3m8rqcdx9IVtJBxoXTY26bQDi4VJEWBdmRi4AdjR"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HXq6pO8IERxukTV6_GEG3m8rqcdx9IVtJBxoXTY26bQDi4VJEWBdmRi4AdjR\"}"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"81b29369-d8ad-4360-bb67-aced0a672ab0","keyName":"e2e-sub-iso-12ba69","subscription":"e2e-a-only-56591d","tenant":"e2e-shared-a-c8326f","userId":"81b29369-d8ad-4360-bb67-aced0a672ab0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/sub-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-56591d"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4152da1-2c58-4792-8ed1-35488a6fd1d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33604","PortSpecifier":{"PortValue":33604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33604","PortSpecifier":{"PortValue":33604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378979,"nanos":600729961},"http":{"id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","method":"GET","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-slN4eeoDKaj1sA2O_dtSkOtjTtHW6i0o9qm7zymJ99hk9Acmz2khB2TCjMgA"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b0de62.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-slN4eeoDKaj1sA2O_dtSkOtjTtHW6i0o9qm7zymJ99hk9Acmz2khB2TCjMgA\"}"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b0de62.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4ee8c797-e99e-4794-9a1c-53be39667591","keyName":"e2e-sub-iso-9411bb","subscription":"e2e-b-only-56591d","tenant":"e2e-shared-b-b0de62","userId":"4ee8c797-e99e-4794-9a1c-53be39667591","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/sub-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-56591d"}
{"level":"info","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:02:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ddfa3ce-44da-4ab9-b202-114105a9cc66","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33966","PortSpecifier":{"PortValue":33966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33966","PortSpecifier":{"PortValue":33966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378989,"nanos":498260737},"http":{"id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/sub-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c89edff6-8a65-4b96-a360-3527c2ea98d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1060271b-879b-43e1-8786-193798bd6e0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35646","PortSpecifier":{"PortValue":35646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1060271b-879b-43e1-8786-193798bd6e0d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1060271b-879b-43e1-8786-193798bd6e0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35646","PortSpecifier":{"PortValue":35646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378989,"nanos":535899237},"http":{"id":"1060271b-879b-43e1-8786-193798bd6e0d","method":"POST","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1060271b-879b-43e1-8786-193798bd6e0d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1060271b-879b-43e1-8786-193798bd6e0d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1060271b-879b-43e1-8786-193798bd6e0d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060271b-879b-43e1-8786-193798bd6e0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060271b-879b-43e1-8786-193798bd6e0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1060271b-879b-43e1-8786-193798bd6e0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/sub-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1060271b-879b-43e1-8786-193798bd6e0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1060271b-879b-43e1-8786-193798bd6e0d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1060271b-879b-43e1-8786-193798bd6e0d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1060271b-879b-43e1-8786-193798bd6e0d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1060271b-879b-43e1-8786-193798bd6e0d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33974","PortSpecifier":{"PortValue":33974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33974","PortSpecifier":{"PortValue":33974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378989,"nanos":573312242},"http":{"id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-I1FHgwL3Knx0H7cn_7As4wI34zrYHsXTmoCGBsr84bZK9BcjCgH4JKRFoEpq"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-I1FHgwL3Knx0H7cn_7As4wI34zrYHsXTmoCGBsr84bZK9BcjCgH4JKRFoEpq\"}"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0307cd16-589e-4cc6-b18c-89f0882a6713","keyName":"e2e-sub-iso-c115cf","subscription":"e2e-shared-sub-44a37d","tenant":"e2e-shared-a-c8326f","userId":"0307cd16-589e-4cc6-b18c-89f0882a6713","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/sub-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-44a37d"}
{"level":"info","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc5f5b33-e16c-4eef-bf2a-e0f9b6e52c91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"575d9082-761f-4a6d-8201-00ff710ad873","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35654","PortSpecifier":{"PortValue":35654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"575d9082-761f-4a6d-8201-00ff710ad873","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"575d9082-761f-4a6d-8201-00ff710ad873","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35654","PortSpecifier":{"PortValue":35654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378989,"nanos":601183763},"http":{"id":"575d9082-761f-4a6d-8201-00ff710ad873","method":"POST","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"575d9082-761f-4a6d-8201-00ff710ad873","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A5QDMF2gJn7k1AV6_dGgeoqMuFxVF0RPu7OaaInm3e6z3NNh6pyJozai3GMo"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"575d9082-761f-4a6d-8201-00ff710ad873","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b0de62.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A5QDMF2gJn7k1AV6_dGgeoqMuFxVF0RPu7OaaInm3e6z3NNh6pyJozai3GMo\"}"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"575d9082-761f-4a6d-8201-00ff710ad873","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b0de62.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f372694c-b3b0-43eb-898a-d77753a483f4","keyName":"e2e-sub-iso-19a63d","subscription":"e2e-shared-sub-44a37d","tenant":"e2e-shared-b-b0de62","userId":"f372694c-b3b0-43eb-898a-d77753a483f4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"575d9082-761f-4a6d-8201-00ff710ad873","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"575d9082-761f-4a6d-8201-00ff710ad873","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"575d9082-761f-4a6d-8201-00ff710ad873","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"575d9082-761f-4a6d-8201-00ff710ad873","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/sub-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"575d9082-761f-4a6d-8201-00ff710ad873","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"575d9082-761f-4a6d-8201-00ff710ad873","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"575d9082-761f-4a6d-8201-00ff710ad873","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-44a37d"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"575d9082-761f-4a6d-8201-00ff710ad873","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"575d9082-761f-4a6d-8201-00ff710ad873","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"575d9082-761f-4a6d-8201-00ff710ad873","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8b13bad0d5dfa66f686cdb971d144c5ccd87bd18c5eae34283067246956dcfe"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a12649dbf94400544765c4eddd951515c0b3815ebac24d1aee21d21ea3d0f6c3"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/659a213b02d866c032cf55da792e904b2e35ab275d2e7d489c08ee80a34766e2"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c40d7337ffd7e8d31a2800179cfaa52f8504581d9a2586383361a7a12e1741f6"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74af2ea1d0ce66879a88af8dedfc745fa92620829042761e693718003974a21a"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fab7db79ce8948e9591bdb86520a3bc463243ff91fa42543c3cd3a741bd3d3b"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3994511a022f17984a90873c71b768b131a17bc7dd77769c9d6b90728096e1fa"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9b13af5c3fe031015b1fdba7969006ab2ff4911706505ac558e06da023bb63a"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5133501ac8a815c6fda9c4b0c1a657784fcd308f1bf8be9477c75baba8f6d6c3"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3aa5f5007cd61d00226dda679d7369f268ee84ceb0755324249205f69ea35d35"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/934d6d5758fdef13f2032f7ee9d36ea5f3b1240c5b5163ae37eda811ec2c5176"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5eb5c8a72c6fb8d7407a1657cafbae2b26db55dc76fc41e08ef313702b90bd2f"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dada153555da9a022a02ed2b5c0c5fcc1c447430049e786de172284cc1ff027"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e1a14ccb4fd93ee1f3bda6c73fa5625471f5ccc451d833f77753faf08835d1e"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/324f0dab49907d0939991bfbb50a198c5045127d1e9a1dcdd1df28c920e8c1c5"}
{"level":"info","ts":"2026-07-06T23:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e5722e0e23c3edc3b06e7a68d305d0e1d612b061444b8d8fa9013c6c0905d6f"}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d"}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d"}
{"level":"error","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d"}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d"}
{"level":"info","ts":"2026-07-06T23:03:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d"}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d"}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d"}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e"}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e"}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e"}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654"}
{"level":"info","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"debug","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e"}
{"level":"info","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654"}
{"level":"debug","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04"}
{"level":"debug","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04"}
{"level":"debug","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04"}
{"level":"debug","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"info","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"info","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"debug","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad8ec6fcaae367a0f1be7791692160ac0dbad82a820883190bca727a20f81c91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad8ec6fcaae367a0f1be7791692160ac0dbad82a820883190bca727a20f81c91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad8ec6fcaae367a0f1be7791692160ac0dbad82a820883190bca727a20f81c91"}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad8ec6fcaae367a0f1be7791692160ac0dbad82a820883190bca727a20f81c91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad8ec6fcaae367a0f1be7791692160ac0dbad82a820883190bca727a20f81c91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad8ec6fcaae367a0f1be7791692160ac0dbad82a820883190bca727a20f81c91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e"}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad8ec6fcaae367a0f1be7791692160ac0dbad82a820883190bca727a20f81c91"}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad8ec6fcaae367a0f1be7791692160ac0dbad82a820883190bca727a20f81c91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e"}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e"}
{"level":"error","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"error","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f"}
{"level":"debug","ts":"2026-07-06T23:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd"}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f"}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd"}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"info","ts":"2026-07-06T23:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd"}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"info","ts":"2026-07-06T23:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541"}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f"}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e"}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654"}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654"}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654"}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04"}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad8ec6fcaae367a0f1be7791692160ac0dbad82a820883190bca727a20f81c91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad8ec6fcaae367a0f1be7791692160ac0dbad82a820883190bca727a20f81c91"}
{"level":"info","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:03:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:03:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:03:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:03:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4"}
{"level":"error","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e"}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d"}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f"}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e"}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d"}
{"level":"debug","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd"}
{"level":"info","ts":"2026-07-06T23:03:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"info","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"149d267d-4562-4858-a9a2-a52dafca9714","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38360","PortSpecifier":{"PortValue":38360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"149d267d-4562-4858-a9a2-a52dafca9714","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"149d267d-4562-4858-a9a2-a52dafca9714","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38360","PortSpecifier":{"PortValue":38360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379039,"nanos":764435603},"http":{"id":"149d267d-4562-4858-a9a2-a52dafca9714","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"149d267d-4562-4858-a9a2-a52dafca9714","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"149d267d-4562-4858-a9a2-a52dafca9714","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"149d267d-4562-4858-a9a2-a52dafca9714","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149d267d-4562-4858-a9a2-a52dafca9714","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149d267d-4562-4858-a9a2-a52dafca9714","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"149d267d-4562-4858-a9a2-a52dafca9714","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"149d267d-4562-4858-a9a2-a52dafca9714","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149d267d-4562-4858-a9a2-a52dafca9714","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"149d267d-4562-4858-a9a2-a52dafca9714","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"149d267d-4562-4858-a9a2-a52dafca9714","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"149d267d-4562-4858-a9a2-a52dafca9714","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4676640a-b74a-437e-be50-62049aba4d93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51684","PortSpecifier":{"PortValue":51684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4676640a-b74a-437e-be50-62049aba4d93","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4676640a-b74a-437e-be50-62049aba4d93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51684","PortSpecifier":{"PortValue":51684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379039,"nanos":805506648},"http":{"id":"4676640a-b74a-437e-be50-62049aba4d93","method":"POST","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4676640a-b74a-437e-be50-62049aba4d93","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4676640a-b74a-437e-be50-62049aba4d93","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4676640a-b74a-437e-be50-62049aba4d93","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4676640a-b74a-437e-be50-62049aba4d93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4676640a-b74a-437e-be50-62049aba4d93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4676640a-b74a-437e-be50-62049aba4d93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/rate-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4676640a-b74a-437e-be50-62049aba4d93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4676640a-b74a-437e-be50-62049aba4d93","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4676640a-b74a-437e-be50-62049aba4d93","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4676640a-b74a-437e-be50-62049aba4d93","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4676640a-b74a-437e-be50-62049aba4d93","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"804d94e2-3839-432b-9a66-895a63656693","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38376","PortSpecifier":{"PortValue":38376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"804d94e2-3839-432b-9a66-895a63656693","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"804d94e2-3839-432b-9a66-895a63656693","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38376","PortSpecifier":{"PortValue":38376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379039,"nanos":845132935},"http":{"id":"804d94e2-3839-432b-9a66-895a63656693","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"804d94e2-3839-432b-9a66-895a63656693","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1736tEguyURAqX884_fJHmHTbVWj7VNlebO2J3tss2h4KXw2nQof6ZJNnDtkf"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"804d94e2-3839-432b-9a66-895a63656693","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1736tEguyURAqX884_fJHmHTbVWj7VNlebO2J3tss2h4KXw2nQof6ZJNnDtkf\"}"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"804d94e2-3839-432b-9a66-895a63656693","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"03265301-f584-4b19-bbbd-7ff7ee41ecbc","keyName":"e2e-rate-a-c26512","subscription":"e2e-rate-iso-a-c26512","tenant":"e2e-shared-a-c8326f","userId":"03265301-f584-4b19-bbbd-7ff7ee41ecbc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"804d94e2-3839-432b-9a66-895a63656693","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-c26512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"804d94e2-3839-432b-9a66-895a63656693","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c26512","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"804d94e2-3839-432b-9a66-895a63656693","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"804d94e2-3839-432b-9a66-895a63656693","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"804d94e2-3839-432b-9a66-895a63656693","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"804d94e2-3839-432b-9a66-895a63656693","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"804d94e2-3839-432b-9a66-895a63656693","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"804d94e2-3839-432b-9a66-895a63656693","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"804d94e2-3839-432b-9a66-895a63656693","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c26512"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"804d94e2-3839-432b-9a66-895a63656693","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"804d94e2-3839-432b-9a66-895a63656693","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"03265301-f584-4b19-bbbd-7ff7ee41ecbc","keyName":"e2e-rate-a-c26512","selected_subscription":"e2e-rate-iso-a-c26512","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-c26512@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c26512","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"804d94e2-3839-432b-9a66-895a63656693","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:03:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"804d94e2-3839-432b-9a66-895a63656693","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38378","PortSpecifier":{"PortValue":38378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38378","PortSpecifier":{"PortValue":38378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379040,"nanos":894263149},"http":{"id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1736tEguyURAqX884_fJHmHTbVWj7VNlebO2J3tss2h4KXw2nQof6ZJNnDtkf"}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1736tEguyURAqX884_fJHmHTbVWj7VNlebO2J3tss2h4KXw2nQof6ZJNnDtkf\"}"}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"03265301-f584-4b19-bbbd-7ff7ee41ecbc","keyName":"e2e-rate-a-c26512","subscription":"e2e-rate-iso-a-c26512","tenant":"e2e-shared-a-c8326f","userId":"03265301-f584-4b19-bbbd-7ff7ee41ecbc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-c26512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c26512","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c26512"}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"03265301-f584-4b19-bbbd-7ff7ee41ecbc","keyName":"e2e-rate-a-c26512","selected_subscription":"e2e-rate-iso-a-c26512","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-c26512@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c26512","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b4a6d0c-fd3b-451a-91b0-7743f84dcf0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59764","PortSpecifier":{"PortValue":59764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59764","PortSpecifier":{"PortValue":59764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379041,"nanos":938760235},"http":{"id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1736tEguyURAqX884_fJHmHTbVWj7VNlebO2J3tss2h4KXw2nQof6ZJNnDtkf"}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1736tEguyURAqX884_fJHmHTbVWj7VNlebO2J3tss2h4KXw2nQof6ZJNnDtkf\"}"}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"03265301-f584-4b19-bbbd-7ff7ee41ecbc","keyName":"e2e-rate-a-c26512","subscription":"e2e-rate-iso-a-c26512","tenant":"e2e-shared-a-c8326f","userId":"03265301-f584-4b19-bbbd-7ff7ee41ecbc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-c26512\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c26512","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c26512"}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"03265301-f584-4b19-bbbd-7ff7ee41ecbc","keyName":"e2e-rate-a-c26512","selected_subscription":"e2e-rate-iso-a-c26512","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-c26512@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c26512","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ef9f0fc-f137-4e72-8f74-48dd82ec664d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59774","PortSpecifier":{"PortValue":59774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98f08c4c-1050-4221-aecb-40ab12817ace","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59774","PortSpecifier":{"PortValue":59774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379048,"nanos":487626484},"http":{"id":"98f08c4c-1050-4221-aecb-40ab12817ace","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98f08c4c-1050-4221-aecb-40ab12817ace","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54188","PortSpecifier":{"PortValue":54188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54188","PortSpecifier":{"PortValue":54188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379048,"nanos":524880971},"http":{"id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","method":"POST","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"037c63e2-5e43-46a0-9163-d222072c3762","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"]}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b03b08b86b4c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb61558a-d084-452d-9e40-d64133c74cef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"037c63e2-5e43-46a0-9163-d222072c3762","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/rate-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"684c9620-46b6-4250-88a7-d7d7cac66aa6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59784","PortSpecifier":{"PortValue":59784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87c84191-ac5a-464f-baad-3de68b79ae18","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59784","PortSpecifier":{"PortValue":59784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379048,"nanos":561931804},"http":{"id":"87c84191-ac5a-464f-baad-3de68b79ae18","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k\"}"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","subscription":"e2e-rate-iso-a-856a8d","tenant":"e2e-shared-a-c8326f","userId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-856a8d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-856a8d"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","selected_subscription":"e2e-rate-iso-a-856a8d","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-856a8d@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c84191-ac5a-464f-baad-3de68b79ae18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59790","PortSpecifier":{"PortValue":59790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54d19214-118b-44ac-8c55-770c7cffb86b","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59790","PortSpecifier":{"PortValue":59790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379049,"nanos":600723996},"http":{"id":"54d19214-118b-44ac-8c55-770c7cffb86b","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k"}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k\"}"}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","subscription":"e2e-rate-iso-a-856a8d","tenant":"e2e-shared-a-c8326f","userId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-856a8d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-856a8d"}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","selected_subscription":"e2e-rate-iso-a-856a8d","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-856a8d@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54d19214-118b-44ac-8c55-770c7cffb86b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59798","PortSpecifier":{"PortValue":59798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c3dc0df-a422-469c-abde-078c2d28ee91","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59798","PortSpecifier":{"PortValue":59798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379050,"nanos":638162287},"http":{"id":"7c3dc0df-a422-469c-abde-078c2d28ee91","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k"}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k\"}"}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","subscription":"e2e-rate-iso-a-856a8d","tenant":"e2e-shared-a-c8326f","userId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-856a8d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-856a8d"}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","selected_subscription":"e2e-rate-iso-a-856a8d","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-856a8d@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c3dc0df-a422-469c-abde-078c2d28ee91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51a98523-7138-479a-b494-71b1e3441de9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44872","PortSpecifier":{"PortValue":44872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51a98523-7138-479a-b494-71b1e3441de9","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51a98523-7138-479a-b494-71b1e3441de9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44872","PortSpecifier":{"PortValue":44872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379051,"nanos":673036972},"http":{"id":"51a98523-7138-479a-b494-71b1e3441de9","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k"}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k\"}"}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","subscription":"e2e-rate-iso-a-856a8d","tenant":"e2e-shared-a-c8326f","userId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-856a8d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51a98523-7138-479a-b494-71b1e3441de9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-856a8d"}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51a98523-7138-479a-b494-71b1e3441de9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","selected_subscription":"e2e-rate-iso-a-856a8d","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-856a8d@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51a98523-7138-479a-b494-71b1e3441de9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51a98523-7138-479a-b494-71b1e3441de9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44874","PortSpecifier":{"PortValue":44874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44874","PortSpecifier":{"PortValue":44874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379052,"nanos":714127516},"http":{"id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k"}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k\"}"}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","subscription":"e2e-rate-iso-a-856a8d","tenant":"e2e-shared-a-c8326f","userId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-856a8d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-856a8d"}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","selected_subscription":"e2e-rate-iso-a-856a8d","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-856a8d@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1aaf3db-08fb-4e24-b8f3-5badaf2ddb0c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44890","PortSpecifier":{"PortValue":44890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44890","PortSpecifier":{"PortValue":44890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379053,"nanos":752868362},"http":{"id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k"}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k\"}"}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","subscription":"e2e-rate-iso-a-856a8d","tenant":"e2e-shared-a-c8326f","userId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-856a8d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-856a8d"}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","selected_subscription":"e2e-rate-iso-a-856a8d","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-856a8d@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2d77dd6-6b31-4a72-bd67-78e88493e0be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44894","PortSpecifier":{"PortValue":44894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ae077ae-b0f6-484c-9244-6b0150871f52","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44894","PortSpecifier":{"PortValue":44894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379054,"nanos":792376981},"http":{"id":"5ae077ae-b0f6-484c-9244-6b0150871f52","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k"}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k\"}"}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","subscription":"e2e-rate-iso-a-856a8d","tenant":"e2e-shared-a-c8326f","userId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-856a8d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-856a8d"}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","selected_subscription":"e2e-rate-iso-a-856a8d","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-856a8d@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ae077ae-b0f6-484c-9244-6b0150871f52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44906","PortSpecifier":{"PortValue":44906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e254b647-54b3-4ad9-8801-08887a8f43d5","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44906","PortSpecifier":{"PortValue":44906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379055,"nanos":829333158},"http":{"id":"e254b647-54b3-4ad9-8801-08887a8f43d5","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k"}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k\"}"}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","subscription":"e2e-rate-iso-a-856a8d","tenant":"e2e-shared-a-c8326f","userId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-856a8d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-856a8d"}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","selected_subscription":"e2e-rate-iso-a-856a8d","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-856a8d@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e254b647-54b3-4ad9-8801-08887a8f43d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44914","PortSpecifier":{"PortValue":44914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44914","PortSpecifier":{"PortValue":44914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379056,"nanos":863903736},"http":{"id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k"}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k\"}"}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","subscription":"e2e-rate-iso-a-856a8d","tenant":"e2e-shared-a-c8326f","userId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-856a8d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-856a8d"}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","selected_subscription":"e2e-rate-iso-a-856a8d","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-856a8d@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9385f65-2059-4d65-a65b-a65d8ae0a845","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44928","PortSpecifier":{"PortValue":44928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5906ec39-1938-49ef-aad1-c072fb92dd05","method":"POST","path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions","host":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44928","PortSpecifier":{"PortValue":44928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379057,"nanos":900274512},"http":{"id":"5906ec39-1938-49ef-aad1-c072fb92dd05","method":"POST","headers":{":authority":"e2e-shared-a-c8326f.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2SKEKvzDC4mO3lWM_Tpz3ImKrjqqwkbGmKmfqlCsezPi64vq0b0CnYeJ0N6k\"}"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","subscription":"e2e-rate-iso-a-856a8d","tenant":"e2e-shared-a-c8326f","userId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\",\"requestedSubscription\":\"e2e-rate-iso-a-856a8d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8326f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-856a8d"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3133db0a-f439-4ffd-81ea-a6ef80ea6440","keyName":"e2e-rate-a-856a8d","selected_subscription":"e2e-rate-iso-a-856a8d","selected_subscription_key":"ai-tenant-e2e-shared-a-c8326f/e2e-rate-iso-a-856a8d@ai-tenant-e2e-shared-a-c8326f/rate-test-model-c8326f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8326f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-856a8d","namespace":"ai-tenant-e2e-shared-a-c8326f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5906ec39-1938-49ef-aad1-c072fb92dd05","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39380","PortSpecifier":{"PortValue":39380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97c85a46-f65c-428b-b50f-f163b56c9049","method":"POST","path":"/ai-tenant-e2e-shared-b-b0de62/rate-test-model-b0de62/v1/completions","host":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39380","PortSpecifier":{"PortValue":39380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783379057,"nanos":936323315},"http":{"id":"97c85a46-f65c-428b-b50f-f163b56c9049","method":"POST","headers":{":authority":"e2e-shared-b-b0de62.apps.4ab57f57-61ab-4162-bdba-b03b08b86b4c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b0de62/rate-test-model-b0de62/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YHSvfVzGv4c9gPRU_bruoCDnBFQ6ud0EFRuiU4BYNT3bjKLCM5XQgxgj4uOi"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b0de62.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YHSvfVzGv4c9gPRU_bruoCDnBFQ6ud0EFRuiU4BYNT3bjKLCM5XQgxgj4uOi\"}"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b0de62.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"336dabc4-5160-4ea6-9da6-a7350410010a","keyName":"e2e-rate-b-856a8d","subscription":"e2e-rate-iso-b-856a8d","tenant":"e2e-shared-b-b0de62","userId":"336dabc4-5160-4ea6-9da6-a7350410010a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b0de62.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b0de62/rate-test-model-b0de62\",\"requestedSubscription\":\"e2e-rate-iso-b-856a8d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b0de62.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b0de62","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-856a8d","namespace":"ai-tenant-e2e-shared-b-b0de62","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b0de62/rate-test-model-b0de62\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-856a8d"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"336dabc4-5160-4ea6-9da6-a7350410010a","keyName":"e2e-rate-b-856a8d","selected_subscription":"e2e-rate-iso-b-856a8d","selected_subscription_key":"ai-tenant-e2e-shared-b-b0de62/e2e-rate-iso-b-856a8d@ai-tenant-e2e-shared-b-b0de62/rate-test-model-b0de62","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b0de62","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-856a8d","namespace":"ai-tenant-e2e-shared-b-b0de62","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:04:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97c85a46-f65c-428b-b50f-f163b56c9049","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e133f6df6af8440e3000ad257b2d7b462db80c0cacfb68bfcaf25b4794f8a8cd"}
{"level":"info","ts":"2026-07-06T23:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e242912bd5909215f44f358dbf7767186927a10a2e025fc54fa7d821a133654"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08fa463cb056054ba96e8eea526dccc6ab0b957e04ecfbb9ee3ca63cfeab2bd8"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2954ec3fe3b98cfb6282b9961d61ef6af4a1dd0ebfdbb59708ddf58db8cbc6e"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03059280d89ecf737e4ae4b76534300e3e50e3c47b118d3c494ef622b1b3b53e"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1233bfe08733ff5189bda3ccf90dcf08634d270eb1823bd4674abc945dccee04"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75161a5624ee781732debbde0be3690be714fe769808cd3c45efa23ee9c3abf4"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa324d4f8a26bfded959dfecfa381637d9e2534dcab89e70d9523a41a41c202d"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/040de484fcd4fdf3c8df19eaf3fd5702d64d7afcb171d4b3f89ac4c925fd1c5f"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad8ec6fcaae367a0f1be7791692160ac0dbad82a820883190bca727a20f81c91"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/029161404a1dc8d41bcf6b7001b31efd76e7fce933b18210e3c6a005e99a67ab"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0473e1cb08de2544268a4f86eabf9a153dfd87f514ab8ab5b86764d56ad73cf4"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bef9f61bfde4fdd388f863f3b1efdfef33848eeb116f4d6adbb01c93e045a7d"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aef095c59dd2df45004a5145fc6c7795e70f019168922c87655ccb153d0280d"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f54522b52af15b033c911eb25fb6cc642162ff544dfc4d544713e6b7d45df4e"}
{"level":"info","ts":"2026-07-06T23:04:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f5e233d02fc9354e79f3df28a72cab3a3c054758afb9e2551b24451b8b29344"}
{"level":"info","ts":"2026-07-06T23:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dc9e14ed443839aab9ef40a9973ad605a4d923e4722b2967a5b0516b6f28541"}
{"level":"info","ts":"2026-07-06T23:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6e636dd019b6b148cae0ce0f2d15a5b62e81fbc69c3125dc3b716b69f2d8895"}
{"level":"info","ts":"2026-07-06T23:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12f75eb72bce0dc89cf093bad1c8c0c1e8787b158466e64f6828db5573f5a4a6"}
{"level":"info","ts":"2026-07-06T23:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/122c2b9273db2c1ab95504acde6726765151655a99f5ef30f95d4d5c5ca2704f"}