--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806"}
{"level":"debug","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806"}
{"level":"info","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806"}
{"level":"debug","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806"}
{"level":"info","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33402","PortSpecifier":{"PortValue":33402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-d188f8.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33402","PortSpecifier":{"PortValue":33402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368015,"nanos":300613407},"http":{"id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","method":"POST","headers":{":authority":"e2e-inf-a-d188f8.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"30f2358280b52fac534c5edf7226cc0e46870cbe8a2c488f0bf09d3fabd7c555"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-d188f8.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-d188f8/test-model-d188f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:00:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f45d4bba-c87a-4dc2-8c38-dfe2b751c7c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33408","PortSpecifier":{"PortValue":33408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7f1b827-41b5-45df-94ed-69eb088e311f","method":"POST","path":"/ai-tenant-e2e-inf-a-d188f8/test-model-d188f8/v1/chat/completions","host":"e2e-inf-a-d188f8.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33408","PortSpecifier":{"PortValue":33408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368019,"nanos":358347764},"http":{"id":"d7f1b827-41b5-45df-94ed-69eb088e311f","method":"POST","headers":{":authority":"e2e-inf-a-d188f8.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-d188f8/test-model-d188f8/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Mw9V5FuOH7UyrDZS_AUJ9s04Eo1lB4g9lqcBKktHiMLwSr3VSQGwJogGKfyA"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-d188f8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Mw9V5FuOH7UyrDZS_AUJ9s04Eo1lB4g9lqcBKktHiMLwSr3VSQGwJogGKfyA\"}"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-d188f8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0a52cd9b-295f-4441-bb93-14ec1f918fc7","keyName":"e2e-tenant-inference-d188f8","subscription":"test-model-d188f8-sub","tenant":"e2e-inf-a-d188f8","userId":"0a52cd9b-295f-4441-bb93-14ec1f918fc7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-d188f8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-d188f8/test-model-d188f8\",\"requestedSubscription\":\"test-model-d188f8-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-d188f8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-d188f8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-d188f8-sub","namespace":"ai-tenant-e2e-inf-a-d188f8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-d188f8/test-model-d188f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-d188f8-sub"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0a52cd9b-295f-4441-bb93-14ec1f918fc7","keyName":"e2e-tenant-inference-d188f8","selected_subscription":"test-model-d188f8-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-d188f8/test-model-d188f8-sub@ai-tenant-e2e-inf-a-d188f8/test-model-d188f8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-d188f8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-d188f8-sub","namespace":"ai-tenant-e2e-inf-a-d188f8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7f1b827-41b5-45df-94ed-69eb088e311f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44910","PortSpecifier":{"PortValue":44910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdac210d-fa31-49e1-b258-004daf54ed2a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-d188f8.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44910","PortSpecifier":{"PortValue":44910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368019,"nanos":694170050},"http":{"id":"fdac210d-fa31-49e1-b258-004daf54ed2a","method":"POST","headers":{":authority":"e2e-inf-a-d188f8.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"30f2358280b52fac534c5edf7226cc0e46870cbe8a2c488f0bf09d3fabd7c555"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-d188f8.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-d188f8/test-model-d188f8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdac210d-fa31-49e1-b258-004daf54ed2a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4bded5c-6f47-4d12-aeaa-8107eb5c0aac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54048","PortSpecifier":{"PortValue":54048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4bded5c-6f47-4d12-aeaa-8107eb5c0aac","method":"POST","path":"/ai-tenant-e2e-inf-b-62de5f/test-model-62de5f/v1/chat/completions","host":"e2e-inf-b-62de5f.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4bded5c-6f47-4d12-aeaa-8107eb5c0aac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54048","PortSpecifier":{"PortValue":54048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368019,"nanos":735220333},"http":{"id":"a4bded5c-6f47-4d12-aeaa-8107eb5c0aac","method":"POST","headers":{":authority":"e2e-inf-b-62de5f.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-62de5f/test-model-62de5f/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4bded5c-6f47-4d12-aeaa-8107eb5c0aac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y2fHghzU08bgy8cs_6UEnROiKJOjvnu8C3Dw1L3MOr7ZuFaByvvJrHY7lC1d"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4bded5c-6f47-4d12-aeaa-8107eb5c0aac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-62de5f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y2fHghzU08bgy8cs_6UEnROiKJOjvnu8C3Dw1L3MOr7ZuFaByvvJrHY7lC1d\"}"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4bded5c-6f47-4d12-aeaa-8107eb5c0aac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-62de5f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"a4bded5c-6f47-4d12-aeaa-8107eb5c0aac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-62de5f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4bded5c-6f47-4d12-aeaa-8107eb5c0aac","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"5464b116aa88a5c314c628744df75bac067f1e7c5b9e5c6bd83d4730cb820507"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-62de5f.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-62de5f/test-model-62de5f/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a4bded5c-6f47-4d12-aeaa-8107eb5c0aac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4bded5c-6f47-4d12-aeaa-8107eb5c0aac","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T20:00:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4bded5c-6f47-4d12-aeaa-8107eb5c0aac","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-06T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2abeba9dd6f352bbbfb379fcf105f8295e87792cbcb3c64aba8cebd11d9e99b0"}
{"level":"info","ts":"2026-07-06T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6084302a77fc75993958009c1704c06d611c244bd88c3c228a633eac2181e97"}
{"level":"info","ts":"2026-07-06T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9cc6c4deb865d1c1c0a06e90e308e0b7a09740b921bc31e8f6b7c680db3b209"}
{"level":"info","ts":"2026-07-06T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5464b116aa88a5c314c628744df75bac067f1e7c5b9e5c6bd83d4730cb820507"}
{"level":"info","ts":"2026-07-06T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d95f20adbc5913b85b10d2979c6514e0fd6c38431da289aa86d40390c52c2021"}
{"level":"info","ts":"2026-07-06T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af96fa46835aa7f8a47be1266f8ef8885f15e37b0220ac8b46556d88fee9a0a7"}
{"level":"info","ts":"2026-07-06T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1449a94bd20fa1e85a66488c28ba1916d924f12ade693567768973a388be97fa"}
{"level":"info","ts":"2026-07-06T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c665fd3c13d1450c1c60561b522fb50bb11c844f2b2ccd9f64cd85a89f1d45b8"}
{"level":"info","ts":"2026-07-06T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29115d93404ab2b69ed0a0eae8b8bfea99793e42022f4aa8c4852d8cf4d6f806"}
{"level":"info","ts":"2026-07-06T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efa612f7d71240c5b0dbe68d7515b5c38d2549819ba9f5c84570a41234f4c486"}
{"level":"info","ts":"2026-07-06T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7613ddbb360149962ece6c255ee1c369982071149960f75af7ce4a0136092b4"}
{"level":"info","ts":"2026-07-06T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/127008942d94554041bef3b3c0de37e468c7f7f9d54c82fa2cbb1d6bdf6dbb6f"}
{"level":"info","ts":"2026-07-06T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03c137c61b7c3c9a0c1938bd6592d2e81dac7730a35df5d3938370db6a694597"}
{"level":"info","ts":"2026-07-06T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eafcb5a0755f8c991b752474516a21d1a46609db288d9c2a15f426c5ad295a8"}
{"level":"info","ts":"2026-07-06T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a54803dee14a5cb577c79358a5145fee51dde48aafd53d965b76145cdfcc351e"}
{"level":"info","ts":"2026-07-06T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f942d3b4907bd78379e6189a7820db6a049e5b003b60037104c377d67f6cb93"}
{"level":"info","ts":"2026-07-06T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30f2358280b52fac534c5edf7226cc0e46870cbe8a2c488f0bf09d3fabd7c555"}
{"level":"info","ts":"2026-07-06T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2ffc8765b09dcc07aecc69f8e4a4d5173203fc22c24dbf92249c876eb983687"}
{"level":"info","ts":"2026-07-06T20:01:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a0508c7b0fb2f095cd35e1cd3fe2894bada2514f99f3fc0c2a9a05c970d1c86"}
{"level":"info","ts":"2026-07-06T20:01:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f7bcad314faef3bae32cc6cab185c609e69338c7208ffa520d22af702d500af"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"}
{"level":"error","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627"}
{"level":"error","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"}
{"level":"debug","ts":"2026-07-06T20:01:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c"}
{"level":"info","ts":"2026-07-06T20:01:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c"}
{"level":"error","ts":"2026-07-06T20:01:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:01:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c"}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c"}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4"}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4"}
{"level":"error","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4"}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4"}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4"}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4"}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4"}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4"}
{"level":"info","ts":"2026-07-06T20:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc33d927501b2311fc526ad6d74ca4e49c6911f402116f389d0cc87ff236218"}
{"level":"info","ts":"2026-07-06T20:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/068e99aa87c843faf63509ae8daa422bf3d1dcca94eb26fa915ebc2910fce627"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e99359ffd6b40c117f18de77b6204f243438658c597537d5723f616b4a18df6c"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39298759c0475c99d460afad30e683cbccc9b482e41c79ab346a98f5948426b4"}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4"}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4"}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4"}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4"}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4"}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4"}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"131e911519749d6d713f5421078166f8ab0a23e764d5f2bc0ce16baf5a0f857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"131e911519749d6d713f5421078166f8ab0a23e764d5f2bc0ce16baf5a0f857e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131e911519749d6d713f5421078166f8ab0a23e764d5f2bc0ce16baf5a0f857e"}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af79e282effeda1b6512def9d1badb03e8807772d0faa4e72982e7216b7e170e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af79e282effeda1b6512def9d1badb03e8807772d0faa4e72982e7216b7e170e"}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af79e282effeda1b6512def9d1badb03e8807772d0faa4e72982e7216b7e170e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"131e911519749d6d713f5421078166f8ab0a23e764d5f2bc0ce16baf5a0f857e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af79e282effeda1b6512def9d1badb03e8807772d0faa4e72982e7216b7e170e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af79e282effeda1b6512def9d1badb03e8807772d0faa4e72982e7216b7e170e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131e911519749d6d713f5421078166f8ab0a23e764d5f2bc0ce16baf5a0f857e"}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af79e282effeda1b6512def9d1badb03e8807772d0faa4e72982e7216b7e170e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"131e911519749d6d713f5421078166f8ab0a23e764d5f2bc0ce16baf5a0f857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["131e911519749d6d713f5421078166f8ab0a23e764d5f2bc0ce16baf5a0f857e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"131e911519749d6d713f5421078166f8ab0a23e764d5f2bc0ce16baf5a0f857e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af79e282effeda1b6512def9d1badb03e8807772d0faa4e72982e7216b7e170e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"131e911519749d6d713f5421078166f8ab0a23e764d5f2bc0ce16baf5a0f857e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4"}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af79e282effeda1b6512def9d1badb03e8807772d0faa4e72982e7216b7e170e"}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131e911519749d6d713f5421078166f8ab0a23e764d5f2bc0ce16baf5a0f857e"}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd"}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4"}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd"}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4"}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd"}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4"}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4"}
{"level":"info","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4"}
{"level":"debug","ts":"2026-07-06T20:03:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5031bdc6cafd0665e969e4577ed97643e758977b866105763e0f5e5598f695e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5031bdc6cafd0665e969e4577ed97643e758977b866105763e0f5e5598f695e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aea64e175bd27b608afa2f1a424d401af2a8c687245f4dd56115260dd69dae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5031bdc6cafd0665e969e4577ed97643e758977b866105763e0f5e5598f695e6"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aea64e175bd27b608afa2f1a424d401af2a8c687245f4dd56115260dd69dae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aea64e175bd27b608afa2f1a424d401af2a8c687245f4dd56115260dd69dae1"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5031bdc6cafd0665e969e4577ed97643e758977b866105763e0f5e5598f695e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aea64e175bd27b608afa2f1a424d401af2a8c687245f4dd56115260dd69dae1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aea64e175bd27b608afa2f1a424d401af2a8c687245f4dd56115260dd69dae1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5031bdc6cafd0665e969e4577ed97643e758977b866105763e0f5e5598f695e6"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aea64e175bd27b608afa2f1a424d401af2a8c687245f4dd56115260dd69dae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5031bdc6cafd0665e969e4577ed97643e758977b866105763e0f5e5598f695e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5031bdc6cafd0665e969e4577ed97643e758977b866105763e0f5e5598f695e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aea64e175bd27b608afa2f1a424d401af2a8c687245f4dd56115260dd69dae1"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5031bdc6cafd0665e969e4577ed97643e758977b866105763e0f5e5598f695e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aea64e175bd27b608afa2f1a424d401af2a8c687245f4dd56115260dd69dae1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5031bdc6cafd0665e969e4577ed97643e758977b866105763e0f5e5598f695e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aea64e175bd27b608afa2f1a424d401af2a8c687245f4dd56115260dd69dae1"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5031bdc6cafd0665e969e4577ed97643e758977b866105763e0f5e5598f695e6"}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff"}
{"level":"info","ts":"2026-07-06T20:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"}
{"level":"debug","ts":"2026-07-06T20:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad"}
{"level":"debug","ts":"2026-07-06T20:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad"}
{"level":"debug","ts":"2026-07-06T20:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4f163767034b361b49c878b912e0f20b5df90bba3305b6bc9fdfe4d2f2db410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4f163767034b361b49c878b912e0f20b5df90bba3305b6bc9fdfe4d2f2db410"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4f163767034b361b49c878b912e0f20b5df90bba3305b6bc9fdfe4d2f2db410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4f163767034b361b49c878b912e0f20b5df90bba3305b6bc9fdfe4d2f2db410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4f163767034b361b49c878b912e0f20b5df90bba3305b6bc9fdfe4d2f2db410"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4f163767034b361b49c878b912e0f20b5df90bba3305b6bc9fdfe4d2f2db410"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4f163767034b361b49c878b912e0f20b5df90bba3305b6bc9fdfe4d2f2db410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4f163767034b361b49c878b912e0f20b5df90bba3305b6bc9fdfe4d2f2db410"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73167a5210f10f3fd3068420a308ae77e616559438ce027b9ce28f9c7207a7b8"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4f163767034b361b49c878b912e0f20b5df90bba3305b6bc9fdfe4d2f2db410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73167a5210f10f3fd3068420a308ae77e616559438ce027b9ce28f9c7207a7b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73167a5210f10f3fd3068420a308ae77e616559438ce027b9ce28f9c7207a7b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73167a5210f10f3fd3068420a308ae77e616559438ce027b9ce28f9c7207a7b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73167a5210f10f3fd3068420a308ae77e616559438ce027b9ce28f9c7207a7b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73167a5210f10f3fd3068420a308ae77e616559438ce027b9ce28f9c7207a7b8"}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f47362d178dc706d0b37b0525afec04486a991b10f087aa173a302d232fd95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f47362d178dc706d0b37b0525afec04486a991b10f087aa173a302d232fd95"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f47362d178dc706d0b37b0525afec04486a991b10f087aa173a302d232fd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f47362d178dc706d0b37b0525afec04486a991b10f087aa173a302d232fd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f47362d178dc706d0b37b0525afec04486a991b10f087aa173a302d232fd95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f47362d178dc706d0b37b0525afec04486a991b10f087aa173a302d232fd95"}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70f47362d178dc706d0b37b0525afec04486a991b10f087aa173a302d232fd95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70f47362d178dc706d0b37b0525afec04486a991b10f087aa173a302d232fd95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70f47362d178dc706d0b37b0525afec04486a991b10f087aa173a302d232fd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70f47362d178dc706d0b37b0525afec04486a991b10f087aa173a302d232fd95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70f47362d178dc706d0b37b0525afec04486a991b10f087aa173a302d232fd95"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc"}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555"}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc"}
{"level":"info","ts":"2026-07-06T20:03:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555"}
{"level":"info","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60476","PortSpecifier":{"PortValue":60476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60476","PortSpecifier":{"PortValue":60476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368210,"nanos":836686142},"http":{"id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/auth-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ce0c854-2dfc-4f19-b5f4-eef108fd40bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bad80a72-212c-487e-9375-545d55743ac9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42526","PortSpecifier":{"PortValue":42526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bad80a72-212c-487e-9375-545d55743ac9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bad80a72-212c-487e-9375-545d55743ac9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42526","PortSpecifier":{"PortValue":42526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368210,"nanos":904682436},"http":{"id":"bad80a72-212c-487e-9375-545d55743ac9","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bad80a72-212c-487e-9375-545d55743ac9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bad80a72-212c-487e-9375-545d55743ac9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bad80a72-212c-487e-9375-545d55743ac9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bad80a72-212c-487e-9375-545d55743ac9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bad80a72-212c-487e-9375-545d55743ac9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bad80a72-212c-487e-9375-545d55743ac9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/auth-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bad80a72-212c-487e-9375-545d55743ac9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bad80a72-212c-487e-9375-545d55743ac9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bad80a72-212c-487e-9375-545d55743ac9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bad80a72-212c-487e-9375-545d55743ac9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bad80a72-212c-487e-9375-545d55743ac9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60484","PortSpecifier":{"PortValue":60484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","method":"GET","path":"/maas-api/v1/api-keys/5d3872d4-d8c7-4e92-8e14-5c24741e041b","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60484","PortSpecifier":{"PortValue":60484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368210,"nanos":992575224},"http":{"id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","method":"GET","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5d3872d4-d8c7-4e92-8e14-5c24741e041b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5d3872d4-d8c7-4e92-8e14-5c24741e041b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/auth-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bccaffd-cc5b-4df1-aa0e-0c85274a2e56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42538","PortSpecifier":{"PortValue":42538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","method":"GET","path":"/maas-api/v1/api-keys/858581c7-ff97-4955-bbb1-1d3a067c8e36","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42538","PortSpecifier":{"PortValue":42538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368211,"nanos":36699762},"http":{"id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","method":"GET","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/858581c7-ff97-4955-bbb1-1d3a067c8e36",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/858581c7-ff97-4955-bbb1-1d3a067c8e36",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/auth-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7716b6a7-3b77-4cbc-b682-f5a919e4e7ef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54860","PortSpecifier":{"PortValue":54860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54860","PortSpecifier":{"PortValue":54860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368232,"nanos":697457879},"http":{"id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/auth-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f07e474-26d5-4545-8e5e-2ce7cd056e12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99063e12-a823-4f52-b365-80cd93a427a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58942","PortSpecifier":{"PortValue":58942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99063e12-a823-4f52-b365-80cd93a427a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99063e12-a823-4f52-b365-80cd93a427a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58942","PortSpecifier":{"PortValue":58942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368232,"nanos":746785436},"http":{"id":"99063e12-a823-4f52-b365-80cd93a427a9","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99063e12-a823-4f52-b365-80cd93a427a9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99063e12-a823-4f52-b365-80cd93a427a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99063e12-a823-4f52-b365-80cd93a427a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99063e12-a823-4f52-b365-80cd93a427a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99063e12-a823-4f52-b365-80cd93a427a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99063e12-a823-4f52-b365-80cd93a427a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/auth-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99063e12-a823-4f52-b365-80cd93a427a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99063e12-a823-4f52-b365-80cd93a427a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99063e12-a823-4f52-b365-80cd93a427a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99063e12-a823-4f52-b365-80cd93a427a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99063e12-a823-4f52-b365-80cd93a427a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54866","PortSpecifier":{"PortValue":54866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54866","PortSpecifier":{"PortValue":54866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368232,"nanos":793205226},"http":{"id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","method":"GET","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2YBSolNUOdfplYw_aXfnz9AKAXHzuPr2qfcb2M0vCLtj8fLXRrbczuJL9fC"}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2YBSolNUOdfplYw_aXfnz9AKAXHzuPr2qfcb2M0vCLtj8fLXRrbczuJL9fC\"}"}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"05a5a690-9b26-4525-84d2-673c097b2ea4","keyName":"e2e-auth-iso-a-16ab65","subscription":"e2e-auth-iso-4d6a5c","tenant":"e2e-shared-a-cd90ec","userId":"05a5a690-9b26-4525-84d2-673c097b2ea4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/auth-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4d6a5c"}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03c07ed5-cfd6-43e8-8224-6d040a7bfd69","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44682","PortSpecifier":{"PortValue":44682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44682","PortSpecifier":{"PortValue":44682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368248,"nanos":399954239},"http":{"id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/auth-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3c0bd4e-6fe0-4b1d-b1bc-699031bbdca9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41284","PortSpecifier":{"PortValue":41284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41284","PortSpecifier":{"PortValue":41284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368248,"nanos":437463357},"http":{"id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/auth-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fddfe03-099b-4ed4-a651-ec4fe4dd63eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b72e68c-75ee-40cd-a63a-5653fd866f0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41292","PortSpecifier":{"PortValue":41292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b72e68c-75ee-40cd-a63a-5653fd866f0f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b72e68c-75ee-40cd-a63a-5653fd866f0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41292","PortSpecifier":{"PortValue":41292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368248,"nanos":479585086},"http":{"id":"7b72e68c-75ee-40cd-a63a-5653fd866f0f","method":"GET","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b72e68c-75ee-40cd-a63a-5653fd866f0f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-erz27HoSi7uKg45L_H7up9QoqLata0IH3rlvXsS6vBYVAdGHgS0wBmJntC4H"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b72e68c-75ee-40cd-a63a-5653fd866f0f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-erz27HoSi7uKg45L_H7up9QoqLata0IH3rlvXsS6vBYVAdGHgS0wBmJntC4H\"}"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b72e68c-75ee-40cd-a63a-5653fd866f0f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b72e68c-75ee-40cd-a63a-5653fd866f0f","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b72e68c-75ee-40cd-a63a-5653fd866f0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"7b72e68c-75ee-40cd-a63a-5653fd866f0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b72e68c-75ee-40cd-a63a-5653fd866f0f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b72e68c-75ee-40cd-a63a-5653fd866f0f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcf78336-3871-442c-b41d-17e38714ea31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60796","PortSpecifier":{"PortValue":60796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcf78336-3871-442c-b41d-17e38714ea31","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcf78336-3871-442c-b41d-17e38714ea31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60796","PortSpecifier":{"PortValue":60796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368263,"nanos":831860515},"http":{"id":"dcf78336-3871-442c-b41d-17e38714ea31","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcf78336-3871-442c-b41d-17e38714ea31","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcf78336-3871-442c-b41d-17e38714ea31","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcf78336-3871-442c-b41d-17e38714ea31","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcf78336-3871-442c-b41d-17e38714ea31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcf78336-3871-442c-b41d-17e38714ea31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcf78336-3871-442c-b41d-17e38714ea31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/auth-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcf78336-3871-442c-b41d-17e38714ea31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcf78336-3871-442c-b41d-17e38714ea31","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcf78336-3871-442c-b41d-17e38714ea31","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcf78336-3871-442c-b41d-17e38714ea31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcf78336-3871-442c-b41d-17e38714ea31","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40736","PortSpecifier":{"PortValue":40736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40736","PortSpecifier":{"PortValue":40736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368263,"nanos":870015282},"http":{"id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/auth-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68f432fb-c7f8-452a-a5ca-4be136e4530c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60810","PortSpecifier":{"PortValue":60810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60810","PortSpecifier":{"PortValue":60810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368263,"nanos":905945599},"http":{"id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/auth-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"887ed53c-cd25-4ff5-b5fb-cb78cf4e24dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40750","PortSpecifier":{"PortValue":40750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40750","PortSpecifier":{"PortValue":40750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368263,"nanos":943706905},"http":{"id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/auth-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d36e79f-10f6-498b-8ba1-9b11ce5d26da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43816","PortSpecifier":{"PortValue":43816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d899cd38-deb0-406a-ac9a-980c0fd54451","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43816","PortSpecifier":{"PortValue":43816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368282,"nanos":495698788},"http":{"id":"d899cd38-deb0-406a-ac9a-980c0fd54451","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/auth-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d899cd38-deb0-406a-ac9a-980c0fd54451","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51654","PortSpecifier":{"PortValue":51654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51654","PortSpecifier":{"PortValue":51654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368282,"nanos":530224989},"http":{"id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/auth-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21be45e4-c1aa-4e33-9fc8-e480eeff9a58","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51664","PortSpecifier":{"PortValue":51664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","method":"GET","path":"/maas-api/v1/api-keys/905eba2b-3eea-4ecf-9ef4-15c9b11d8c80","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51664","PortSpecifier":{"PortValue":51664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368282,"nanos":570443307},"http":{"id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","method":"GET","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/905eba2b-3eea-4ecf-9ef4-15c9b11d8c80",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/905eba2b-3eea-4ecf-9ef4-15c9b11d8c80",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/auth-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbb6d4cb-9c53-4067-9ec6-e6644f937a49","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43824","PortSpecifier":{"PortValue":43824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","method":"GET","path":"/maas-api/v1/api-keys/905eba2b-3eea-4ecf-9ef4-15c9b11d8c80","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43824","PortSpecifier":{"PortValue":43824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368282,"nanos":609945658},"http":{"id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","method":"GET","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/905eba2b-3eea-4ecf-9ef4-15c9b11d8c80",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/905eba2b-3eea-4ecf-9ef4-15c9b11d8c80",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/auth-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"228a7315-e7ff-4519-95fa-b20f2b9405d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55106","PortSpecifier":{"PortValue":55106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55106","PortSpecifier":{"PortValue":55106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368298,"nanos":75948977},"http":{"id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/auth-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa5630f2-7fe3-422f-8db9-10db5cf3b4df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34666","PortSpecifier":{"PortValue":34666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34666","PortSpecifier":{"PortValue":34666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368298,"nanos":115668334},"http":{"id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/auth-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ec55b79-7dee-4b41-8e5b-3a631dd5f2fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55122","PortSpecifier":{"PortValue":55122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55122","PortSpecifier":{"PortValue":55122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368298,"nanos":158245412},"http":{"id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HZy1NOP9GYrM16Be_SxnSdqGBQZv51FLwRb8GHk2ObnD2Bt6Sz9oMdxQhOeK"}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HZy1NOP9GYrM16Be_SxnSdqGBQZv51FLwRb8GHk2ObnD2Bt6Sz9oMdxQhOeK\"}"}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d29f86df-095d-4d12-90e5-81692a7d33c0","keyName":"e2e-auth-iso-a-0878bc","subscription":"e2e-auth-iso-36fcfc","tenant":"e2e-shared-a-cd90ec","userId":"d29f86df-095d-4d12-90e5-81692a7d33c0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/auth-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-36fcfc"}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37d13ae3-bbd8-423a-b289-4fa73c64893e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af79e282effeda1b6512def9d1badb03e8807772d0faa4e72982e7216b7e170e"}
{"level":"info","ts":"2026-07-06T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65177023c974c0a29fffd7438fdf6543463bd90fabcfd8c922f3bdb3f453d9fc"}
{"level":"info","ts":"2026-07-06T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d1900b8ec4e64ac56434a2f254476fbbe95245c04000b14a607e2b5cfe52fb4"}
{"level":"info","ts":"2026-07-06T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb2b06e5e1406a4fb090cc85878d42fb4d736c700ffc67f8d0098ea25966c1e4"}
{"level":"info","ts":"2026-07-06T20:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70f47362d178dc706d0b37b0525afec04486a991b10f087aa173a302d232fd95"}
{"level":"info","ts":"2026-07-06T20:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d18272deb3e9940b3476823f9ba74003723be3c36fdc0dabae52de3fc28d418"}
{"level":"info","ts":"2026-07-06T20:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cdc63524a689c83944dd42637f448910ae29c856570e3efadc00d3d8cfa3555"}
{"level":"info","ts":"2026-07-06T20:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4f163767034b361b49c878b912e0f20b5df90bba3305b6bc9fdfe4d2f2db410"}
{"level":"info","ts":"2026-07-06T20:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5aea64e175bd27b608afa2f1a424d401af2a8c687245f4dd56115260dd69dae1"}
{"level":"info","ts":"2026-07-06T20:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/131e911519749d6d713f5421078166f8ab0a23e764d5f2bc0ce16baf5a0f857e"}
{"level":"info","ts":"2026-07-06T20:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5031bdc6cafd0665e969e4577ed97643e758977b866105763e0f5e5598f695e6"}
{"level":"info","ts":"2026-07-06T20:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e990c9777ca16f8714872e32ef3f74394d1b5cc5a5a39a761144bfe567fe480"}
{"level":"info","ts":"2026-07-06T20:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f02a0a43d543f29d4fecb92e21413cee3fd6809694eb0a34846e45e57c7fd0af"}
{"level":"info","ts":"2026-07-06T20:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73167a5210f10f3fd3068420a308ae77e616559438ce027b9ce28f9c7207a7b8"}
{"level":"info","ts":"2026-07-06T20:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07994fa5d1745e758c4ed705e2853ff21be8ef17f241d13d0cdbffd3d85420ff"}
{"level":"info","ts":"2026-07-06T20:05:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3b58ec03f1f0c28e464d311988a963295c0af967dbed7e80f9f1b69defae3ad"}
{"level":"debug","ts":"2026-07-06T20:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc"}
{"level":"debug","ts":"2026-07-06T20:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc"}
{"level":"debug","ts":"2026-07-06T20:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc"}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598"}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598"}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598"}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598"}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20"}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20"}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598"}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20"}
{"level":"error","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598"}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20"}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86"}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86"}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193"}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193"}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193"}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa"}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa"}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa"}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340"}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340"}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"error","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340"}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340"}
{"level":"error","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340"}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"}
{"level":"error","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"error","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"error","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"debug","ts":"2026-07-06T20:05:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20"}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"info","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"error","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"}
{"level":"error","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598"}
{"level":"debug","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36948","PortSpecifier":{"PortValue":36948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db383a79-104d-48c0-b75a-61d380f0f00d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36948","PortSpecifier":{"PortValue":36948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368347,"nanos":224932689},"http":{"id":"db383a79-104d-48c0-b75a-61d380f0f00d","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/sub-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db383a79-104d-48c0-b75a-61d380f0f00d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50276","PortSpecifier":{"PortValue":50276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3afa67ab-975b-460b-b1e3-047db525cdb2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50276","PortSpecifier":{"PortValue":50276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368347,"nanos":270643680},"http":{"id":"3afa67ab-975b-460b-b1e3-047db525cdb2","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/sub-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3afa67ab-975b-460b-b1e3-047db525cdb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36960","PortSpecifier":{"PortValue":36960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36960","PortSpecifier":{"PortValue":36960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368347,"nanos":314761641},"http":{"id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","method":"GET","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y3x9leEAy4P4osG6_QqnWZ7ggqCe6WwOikWwITynkUekj6dsuAdjKD1KszsQ"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y3x9leEAy4P4osG6_QqnWZ7ggqCe6WwOikWwITynkUekj6dsuAdjKD1KszsQ\"}"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b61743cc-c81e-42e2-a83a-88b03180ed56","keyName":"e2e-sub-iso-6aa920","subscription":"e2e-a-only-1917dc","tenant":"e2e-shared-a-cd90ec","userId":"b61743cc-c81e-42e2-a83a-88b03180ed56","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/sub-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-1917dc"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fcfd153-7eda-4e5a-8e1a-5d1552b5427f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50282","PortSpecifier":{"PortValue":50282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50282","PortSpecifier":{"PortValue":50282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368347,"nanos":342030179},"http":{"id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","method":"GET","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DFFGoy2IW3xMAbmq_RuvpBPNdkfH77HEpX2HZHaNncP9YlMVUoyG84Ja5MFm"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DFFGoy2IW3xMAbmq_RuvpBPNdkfH77HEpX2HZHaNncP9YlMVUoyG84Ja5MFm\"}"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c86d7488-e320-41d6-9147-1c360ab24c49","keyName":"e2e-sub-iso-b51200","subscription":"e2e-b-only-1917dc","tenant":"e2e-shared-b-04d79c","userId":"c86d7488-e320-41d6-9147-1c360ab24c49","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/sub-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-1917dc"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0ca836a-2650-40bd-9b36-5c49709c0e06","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44230","PortSpecifier":{"PortValue":44230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a3a4a75-f886-4010-8602-403302c4fbea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44230","PortSpecifier":{"PortValue":44230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368355,"nanos":810635857},"http":{"id":"2a3a4a75-f886-4010-8602-403302c4fbea","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/sub-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a3a4a75-f886-4010-8602-403302c4fbea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43734","PortSpecifier":{"PortValue":43734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c58648d-8101-4725-8a18-703fdd26ae66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43734","PortSpecifier":{"PortValue":43734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368355,"nanos":846056351},"http":{"id":"8c58648d-8101-4725-8a18-703fdd26ae66","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/sub-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c58648d-8101-4725-8a18-703fdd26ae66","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44234","PortSpecifier":{"PortValue":44234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44234","PortSpecifier":{"PortValue":44234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368355,"nanos":887958095},"http":{"id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-b31jCQCbWbVufgsJ_hSd2iAy0iIz2dHLrAF3V3Xd1EnaEYQtn2922cZ3hDpK"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-b31jCQCbWbVufgsJ_hSd2iAy0iIz2dHLrAF3V3Xd1EnaEYQtn2922cZ3hDpK\"}"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b7e5af39-1d95-4f6a-8ede-2e5e38c6d2fb","keyName":"e2e-sub-iso-6cb8a8","subscription":"e2e-shared-sub-f6ea4e","tenant":"e2e-shared-a-cd90ec","userId":"b7e5af39-1d95-4f6a-8ede-2e5e38c6d2fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/sub-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f6ea4e"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a69d290-1d5b-4a77-95c2-8118c4aedb3a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43746","PortSpecifier":{"PortValue":43746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43746","PortSpecifier":{"PortValue":43746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368355,"nanos":921266861},"http":{"id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Hv1U2IyTXl7eqWym_80dh5Evp2FB6matnTH0i3qEyw7BtQZDK8AsCOJcraQZ"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Hv1U2IyTXl7eqWym_80dh5Evp2FB6matnTH0i3qEyw7BtQZDK8AsCOJcraQZ\"}"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f9509f19-a516-472c-a2f6-8cc0b69dbe82","keyName":"e2e-sub-iso-2e36d5","subscription":"e2e-shared-sub-f6ea4e","tenant":"e2e-shared-b-04d79c","userId":"f9509f19-a516-472c-a2f6-8cc0b69dbe82","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/sub-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f6ea4e"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dec5a9a3-b99c-4a75-a28b-231a613bcfc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4e77ef340f002db476e2e6f37ac2430418464d829f3a3b1c952fe7e3f11ed86"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f49754507045eb7cf9898b388a95d08f7961a1133beeedff343bc6da8e8a0193"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3e6a03ab583d5e0ba25a7ea02097db7d924126045f36652edc04ad19832e038"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcd996cf8288d3e70b8c92878a2fe71f1837c9b5f611516d2024add0bac4b576"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba8b0d3604ccb31bec9656dce92863161b23417bfa3804037f12a387c45e8d74"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60cb127f9e8d56b137e2565216f733abf2e1e9169848f1b3a02330ec8fa7b538"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdfa804498452cec8474718226968024917c3ea809e39e0b7ca102178359aa20"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e276eed45ec714740d1572cd0136eb161c50cc86d959300b9a72675a2c728598"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e82a7dc9e6f8c45ae6e88905daf69e4a2d359603e39e2b926d97bc6e7130b82"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/326fb13fcd08224a1f42b327d9c3655634c0d496abbc7135f4498dc1ce486f6b"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8507b8b6e0cb47d124708e8391ee6e86d521a78eb1617906fbfc4721f7b9d340"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f79f1ac0b8041ae03187728911289855f2b8520e6db84fbe99195a25c0d0f76d"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17b09554f3bbf9a08bb10eaa73856c3665b1418870ee783e215f72ab5cc672fa"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf8c6e60c7023d3af4a7e6ad023755e11403ff898a505f703aad1b7b410236df"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8180f31f86d9b98c7c6ab6d2561a2868dec37822aa16916884bc34452b6e2dc"}
{"level":"info","ts":"2026-07-06T20:06:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a77a41d2f495e0244a6154f5c2919b725dec7c3bc1f298b9fbb6f5507101655"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e"}
{"level":"info","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e"}
{"level":"info","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"info","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"info","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43472f0af7fb8e0299e7aa1176aa3f5a65586ab9d7437b466ed692ba68101316"}
{"level":"info","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"}
{"level":"info","ts":"2026-07-06T20:06:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e"}
{"level":"info","ts":"2026-07-06T20:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43472f0af7fb8e0299e7aa1176aa3f5a65586ab9d7437b466ed692ba68101316","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43472f0af7fb8e0299e7aa1176aa3f5a65586ab9d7437b466ed692ba68101316"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"}
{"level":"info","ts":"2026-07-06T20:06:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"info","ts":"2026-07-06T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43472f0af7fb8e0299e7aa1176aa3f5a65586ab9d7437b466ed692ba68101316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5bdf90e344193575dfa57a92f8f45be13a229d0b95353fbc2aba58d0a9aab25"}
{"level":"info","ts":"2026-07-06T20:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43472f0af7fb8e0299e7aa1176aa3f5a65586ab9d7437b466ed692ba68101316"}
{"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b280e985452d2dd74b50764bd33403392b93f8a6a381dc66639df61ad373284"}
{"level":"info","ts":"2026-07-06T20:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"}
{"level":"info","ts":"2026-07-06T20:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5bdf90e344193575dfa57a92f8f45be13a229d0b95353fbc2aba58d0a9aab25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5bdf90e344193575dfa57a92f8f45be13a229d0b95353fbc2aba58d0a9aab25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"info","ts":"2026-07-06T20:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"}
{"level":"info","ts":"2026-07-06T20:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5bdf90e344193575dfa57a92f8f45be13a229d0b95353fbc2aba58d0a9aab25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43472f0af7fb8e0299e7aa1176aa3f5a65586ab9d7437b466ed692ba68101316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b280e985452d2dd74b50764bd33403392b93f8a6a381dc66639df61ad373284","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b280e985452d2dd74b50764bd33403392b93f8a6a381dc66639df61ad373284"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5bdf90e344193575dfa57a92f8f45be13a229d0b95353fbc2aba58d0a9aab25"}
{"level":"info","ts":"2026-07-06T20:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b280e985452d2dd74b50764bd33403392b93f8a6a381dc66639df61ad373284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b280e985452d2dd74b50764bd33403392b93f8a6a381dc66639df61ad373284"}
{"level":"info","ts":"2026-07-06T20:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5bdf90e344193575dfa57a92f8f45be13a229d0b95353fbc2aba58d0a9aab25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b280e985452d2dd74b50764bd33403392b93f8a6a381dc66639df61ad373284","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"info","ts":"2026-07-06T20:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"debug","ts":"2026-07-06T20:06:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"info","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43472f0af7fb8e0299e7aa1176aa3f5a65586ab9d7437b466ed692ba68101316","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43472f0af7fb8e0299e7aa1176aa3f5a65586ab9d7437b466ed692ba68101316"}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828"}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5bdf90e344193575dfa57a92f8f45be13a229d0b95353fbc2aba58d0a9aab25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795"}
{"level":"debug","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5bdf90e344193575dfa57a92f8f45be13a229d0b95353fbc2aba58d0a9aab25"}
{"level":"debug","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"}
{"level":"debug","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd"}
{"level":"debug","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e"}
{"level":"debug","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"debug","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b280e985452d2dd74b50764bd33403392b93f8a6a381dc66639df61ad373284","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"info","ts":"2026-07-06T20:07:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b280e985452d2dd74b50764bd33403392b93f8a6a381dc66639df61ad373284"}
{"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60246","PortSpecifier":{"PortValue":60246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adb5128c-afed-4381-ae89-8b2f5e785529","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60246","PortSpecifier":{"PortValue":60246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368458,"nanos":415410303},"http":{"id":"adb5128c-afed-4381-ae89-8b2f5e785529","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adb5128c-afed-4381-ae89-8b2f5e785529","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40210","PortSpecifier":{"PortValue":40210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:40210","PortSpecifier":{"PortValue":40210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368458,"nanos":460671636},"http":{"id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b66ae2a1-784a-4bcb-961b-2b23e6a17ec7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60248","PortSpecifier":{"PortValue":60248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","method":"POST","path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60248","PortSpecifier":{"PortValue":60248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368458,"nanos":505853709},"http":{"id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UAGehOWgybFvapO6_BCp3WYkP95SHvUMuy7SAr6glF5rcCi3VDyYPngbNy8x"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UAGehOWgybFvapO6_BCp3WYkP95SHvUMuy7SAr6glF5rcCi3VDyYPngbNy8x\"}"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e20a9a24-7016-428a-9adb-bec177f49d8e","keyName":"e2e-rate-a-526796","subscription":"e2e-rate-iso-a-526796","tenant":"e2e-shared-a-cd90ec","userId":"e20a9a24-7016-428a-9adb-bec177f49d8e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\",\"requestedSubscription\":\"e2e-rate-iso-a-526796\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-526796","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-526796"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e20a9a24-7016-428a-9adb-bec177f49d8e","keyName":"e2e-rate-a-526796","selected_subscription":"e2e-rate-iso-a-526796","selected_subscription_key":"ai-tenant-e2e-shared-a-cd90ec/e2e-rate-iso-a-526796@ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-526796","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c91dc6b-08b2-4d41-913d-a9b013cddec6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57468","PortSpecifier":{"PortValue":57468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","method":"POST","path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57468","PortSpecifier":{"PortValue":57468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368459,"nanos":575240283},"http":{"id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UAGehOWgybFvapO6_BCp3WYkP95SHvUMuy7SAr6glF5rcCi3VDyYPngbNy8x"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UAGehOWgybFvapO6_BCp3WYkP95SHvUMuy7SAr6glF5rcCi3VDyYPngbNy8x\"}"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e20a9a24-7016-428a-9adb-bec177f49d8e","keyName":"e2e-rate-a-526796","subscription":"e2e-rate-iso-a-526796","tenant":"e2e-shared-a-cd90ec","userId":"e20a9a24-7016-428a-9adb-bec177f49d8e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\",\"requestedSubscription\":\"e2e-rate-iso-a-526796\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-526796","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-526796"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e20a9a24-7016-428a-9adb-bec177f49d8e","keyName":"e2e-rate-a-526796","selected_subscription":"e2e-rate-iso-a-526796","selected_subscription_key":"ai-tenant-e2e-shared-a-cd90ec/e2e-rate-iso-a-526796@ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-526796","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceaca159-fd6d-4b7a-afd0-308e8d76501d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57476","PortSpecifier":{"PortValue":57476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","method":"POST","path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57476","PortSpecifier":{"PortValue":57476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368460,"nanos":617983525},"http":{"id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UAGehOWgybFvapO6_BCp3WYkP95SHvUMuy7SAr6glF5rcCi3VDyYPngbNy8x"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UAGehOWgybFvapO6_BCp3WYkP95SHvUMuy7SAr6glF5rcCi3VDyYPngbNy8x\"}"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e20a9a24-7016-428a-9adb-bec177f49d8e","keyName":"e2e-rate-a-526796","subscription":"e2e-rate-iso-a-526796","tenant":"e2e-shared-a-cd90ec","userId":"e20a9a24-7016-428a-9adb-bec177f49d8e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\",\"requestedSubscription\":\"e2e-rate-iso-a-526796\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-526796","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-526796"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e20a9a24-7016-428a-9adb-bec177f49d8e","keyName":"e2e-rate-a-526796","selected_subscription":"e2e-rate-iso-a-526796","selected_subscription_key":"ai-tenant-e2e-shared-a-cd90ec/e2e-rate-iso-a-526796@ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-526796","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f24a2d58-96fd-481a-9a7b-6f3b995a2404","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47354","PortSpecifier":{"PortValue":47354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15db32fe-f86b-4148-b3fd-0609147b6007","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47354","PortSpecifier":{"PortValue":47354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368471,"nanos":945791397},"http":{"id":"15db32fe-f86b-4148-b3fd-0609147b6007","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15db32fe-f86b-4148-b3fd-0609147b6007","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37974","PortSpecifier":{"PortValue":37974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3791238e-82ea-4846-be95-f6d79df0cc6b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37974","PortSpecifier":{"PortValue":37974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368471,"nanos":992805686},"http":{"id":"3791238e-82ea-4846-be95-f6d79df0cc6b","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"]}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8885b85dd783"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b3ccc1c5-b4ab-404c-be08-95bd80a52e31"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"83a965ef-1795-469f-b987-70e5fffe2c9a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3791238e-82ea-4846-be95-f6d79df0cc6b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47360","PortSpecifier":{"PortValue":47360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","method":"POST","path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47360","PortSpecifier":{"PortValue":47360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368472,"nanos":33147745},"http":{"id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tn3MEcZgjiRqAgo8_1dez7rXsiMSjPoYb1h8oUjvQI45be65JRMKQsrw7nkc"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tn3MEcZgjiRqAgo8_1dez7rXsiMSjPoYb1h8oUjvQI45be65JRMKQsrw7nkc\"}"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"278fba3a-25c1-456c-a585-f956d1c24a88","keyName":"e2e-rate-a-726092","subscription":"e2e-rate-iso-a-726092","tenant":"e2e-shared-a-cd90ec","userId":"278fba3a-25c1-456c-a585-f956d1c24a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\",\"requestedSubscription\":\"e2e-rate-iso-a-726092\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-726092","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-726092"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"278fba3a-25c1-456c-a585-f956d1c24a88","keyName":"e2e-rate-a-726092","selected_subscription":"e2e-rate-iso-a-726092","selected_subscription_key":"ai-tenant-e2e-shared-a-cd90ec/e2e-rate-iso-a-726092@ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-726092","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cf104e9-8736-405d-9252-c66e3e08ab5b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47372","PortSpecifier":{"PortValue":47372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f511418-8e54-47a8-8864-ee931cbde6ec","method":"POST","path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47372","PortSpecifier":{"PortValue":47372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368473,"nanos":77272322},"http":{"id":"2f511418-8e54-47a8-8864-ee931cbde6ec","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tn3MEcZgjiRqAgo8_1dez7rXsiMSjPoYb1h8oUjvQI45be65JRMKQsrw7nkc"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tn3MEcZgjiRqAgo8_1dez7rXsiMSjPoYb1h8oUjvQI45be65JRMKQsrw7nkc\"}"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"278fba3a-25c1-456c-a585-f956d1c24a88","keyName":"e2e-rate-a-726092","subscription":"e2e-rate-iso-a-726092","tenant":"e2e-shared-a-cd90ec","userId":"278fba3a-25c1-456c-a585-f956d1c24a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\",\"requestedSubscription\":\"e2e-rate-iso-a-726092\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-726092","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-726092"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"278fba3a-25c1-456c-a585-f956d1c24a88","keyName":"e2e-rate-a-726092","selected_subscription":"e2e-rate-iso-a-726092","selected_subscription_key":"ai-tenant-e2e-shared-a-cd90ec/e2e-rate-iso-a-726092@ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-726092","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f511418-8e54-47a8-8864-ee931cbde6ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47378","PortSpecifier":{"PortValue":47378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74ce369c-eebb-404a-b328-c308b24c79a8","method":"POST","path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions","host":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47378","PortSpecifier":{"PortValue":47378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368474,"nanos":117346858},"http":{"id":"74ce369c-eebb-404a-b328-c308b24c79a8","method":"POST","headers":{":authority":"e2e-shared-a-cd90ec.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tn3MEcZgjiRqAgo8_1dez7rXsiMSjPoYb1h8oUjvQI45be65JRMKQsrw7nkc"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tn3MEcZgjiRqAgo8_1dez7rXsiMSjPoYb1h8oUjvQI45be65JRMKQsrw7nkc\"}"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"278fba3a-25c1-456c-a585-f956d1c24a88","keyName":"e2e-rate-a-726092","subscription":"e2e-rate-iso-a-726092","tenant":"e2e-shared-a-cd90ec","userId":"278fba3a-25c1-456c-a585-f956d1c24a88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\",\"requestedSubscription\":\"e2e-rate-iso-a-726092\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cd90ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-726092","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-726092"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"278fba3a-25c1-456c-a585-f956d1c24a88","keyName":"e2e-rate-a-726092","selected_subscription":"e2e-rate-iso-a-726092","selected_subscription_key":"ai-tenant-e2e-shared-a-cd90ec/e2e-rate-iso-a-726092@ai-tenant-e2e-shared-a-cd90ec/rate-test-model-cd90ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cd90ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-726092","namespace":"ai-tenant-e2e-shared-a-cd90ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74ce369c-eebb-404a-b328-c308b24c79a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37980","PortSpecifier":{"PortValue":37980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","method":"POST","path":"/ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c/v1/completions","host":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37980","PortSpecifier":{"PortValue":37980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368474,"nanos":161536666},"http":{"id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","method":"POST","headers":{":authority":"e2e-shared-b-04d79c.apps.530e3cfc-d61c-4244-8a6c-8885b85dd783.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-izCEnzjxLE2GNxoW_cBH4W9bvHoXd6leSszdtpRPm569T62hwN3PxTJmvxBY"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-izCEnzjxLE2GNxoW_cBH4W9bvHoXd6leSszdtpRPm569T62hwN3PxTJmvxBY\"}"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a742b6a3-7bad-483e-b33f-196e7d585864","keyName":"e2e-rate-b-726092","subscription":"e2e-rate-iso-b-726092","tenant":"e2e-shared-b-04d79c","userId":"a742b6a3-7bad-483e-b33f-196e7d585864","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c\",\"requestedSubscription\":\"e2e-rate-iso-b-726092\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-04d79c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-04d79c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-726092","namespace":"ai-tenant-e2e-shared-b-04d79c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-726092"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a742b6a3-7bad-483e-b33f-196e7d585864","keyName":"e2e-rate-b-726092","selected_subscription":"e2e-rate-iso-b-726092","selected_subscription_key":"ai-tenant-e2e-shared-b-04d79c/e2e-rate-iso-b-726092@ai-tenant-e2e-shared-b-04d79c/rate-test-model-04d79c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-04d79c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-726092","namespace":"ai-tenant-e2e-shared-b-04d79c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c7b31c-d36c-4227-9cfd-4a4e14703d39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9121392f2e2c8761bdc8d7effc2bd00b966d65ceeac9d3f41ac85eced0985560"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4bf85e20b6642356007ec58874e250cb74f39baf2a9301abfe4fc2087a538e5"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9648854c746fb019237a8dad96d4450ba03b2400b05cad0a3579e658d6c14828"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b389211fbdffff3488f991b7fc010c46951a8e3cd832d50c9dcf22ae9c6dee5"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b280e985452d2dd74b50764bd33403392b93f8a6a381dc66639df61ad373284"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3634566850d1aca286d943b3c6fa13625840c3b827294f1d0b7b12968710fc4"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5bdf90e344193575dfa57a92f8f45be13a229d0b95353fbc2aba58d0a9aab25"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b154c3feecba5af787abb77d375188d9af2f8407c2ae1dde0156c51b0765c25e"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0935d5bdcf9aa0b29c7b8e1cc4b3622131955b22175753249ec95772bb0fd0ea"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a127304b204e55bbd9282863a9d84b49f93f9a3a46ae118e6f4f383495a1c535"}
{"level":"info","ts":"2026-07-06T20:08:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b0f63b425dc9245519c3eac3d10af36667dc7e947431b8ba1ee56924898961e"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/021066bde8a2fbdb6dd608c82397e466ea7525fb24851fae171c8afa7e636df8"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43472f0af7fb8e0299e7aa1176aa3f5a65586ab9d7437b466ed692ba68101316"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3aa377891d73511e8b4eb9530b0d58979f8d623b53deff63341217cf4b2fdcd"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d14a2ebbbca1e7e2d4fa80b5fea2fa5695eef35f11dc9cfb1e17056b3729bba2"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80c5339bbebb9ed143cc6c26adce392969c224e2eaf9afd699f5aff2b172dbb7"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2c4ec7de46fd58df85e403708d24ca030f62db8d244e20d7f29f3e789def4d0"}
{"level":"info","ts":"2026-07-06T20:08:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c8c44dd229d8d1ba89ccafae1e42fda54eb42b35222dc63431d1347f90ce795"}
{"level":"info","ts":"2026-07-06T20:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/321aa603782b99e69ee84f11ed32ee74e9640a02ed595c80fede3dd9e9e85da4"}
{"level":"info","ts":"2026-07-06T20:08:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d740537eeb79b79fe0d3b3792f528f051c49a5cc6e83ff1e7c05e3f0b0344b60"}