--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2590650c4f3d2943b797bd2bbe049c9aae042785e7a16afb3febb3a19b06ac51"}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7637764529dd8fae6a6ba45fb5f6a80991cc6129bcda318a2bd8c6e15607c2c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b31c38db4b724efbbf14997ccd284df4c68906791bd3e516d81217c3be6b2ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31c38db4b724efbbf14997ccd284df4c68906791bd3e516d81217c3be6b2ce5"}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b31c38db4b724efbbf14997ccd284df4c68906791bd3e516d81217c3be6b2ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0ec84b91ccffe721a893d26ffd48383e658621356794a25ce877e7419fbd66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7637764529dd8fae6a6ba45fb5f6a80991cc6129bcda318a2bd8c6e15607c2c6"}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0ec84b91ccffe721a893d26ffd48383e658621356794a25ce877e7419fbd66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7"}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b31c38db4b724efbbf14997ccd284df4c68906791bd3e516d81217c3be6b2ce5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b31c38db4b724efbbf14997ccd284df4c68906791bd3e516d81217c3be6b2ce5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0ec84b91ccffe721a893d26ffd48383e658621356794a25ce877e7419fbd66"}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b31c38db4b724efbbf14997ccd284df4c68906791bd3e516d81217c3be6b2ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0ec84b91ccffe721a893d26ffd48383e658621356794a25ce877e7419fbd66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea0ec84b91ccffe721a893d26ffd48383e658621356794a25ce877e7419fbd66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31c38db4b724efbbf14997ccd284df4c68906791bd3e516d81217c3be6b2ce5"}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0ec84b91ccffe721a893d26ffd48383e658621356794a25ce877e7419fbd66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b31c38db4b724efbbf14997ccd284df4c68906791bd3e516d81217c3be6b2ce5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0ec84b91ccffe721a893d26ffd48383e658621356794a25ce877e7419fbd66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7"}
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31c38db4b724efbbf14997ccd284df4c68906791bd3e516d81217c3be6b2ce5"}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0ec84b91ccffe721a893d26ffd48383e658621356794a25ce877e7419fbd66"}
{"level":"info","ts":"2026-07-07T17:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7"}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"277dd0c347dd6b09ac94d8faa64415d38212df11bcfad25f47d34b766826524a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"277dd0c347dd6b09ac94d8faa64415d38212df11bcfad25f47d34b766826524a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/277dd0c347dd6b09ac94d8faa64415d38212df11bcfad25f47d34b766826524a"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81eecf6df84e1cd9f41af8c3cf77d4930895b0aab3905bb9526d3b076203f6db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81eecf6df84e1cd9f41af8c3cf77d4930895b0aab3905bb9526d3b076203f6db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81eecf6df84e1cd9f41af8c3cf77d4930895b0aab3905bb9526d3b076203f6db"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"277dd0c347dd6b09ac94d8faa64415d38212df11bcfad25f47d34b766826524a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["277dd0c347dd6b09ac94d8faa64415d38212df11bcfad25f47d34b766826524a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"277dd0c347dd6b09ac94d8faa64415d38212df11bcfad25f47d34b766826524a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81eecf6df84e1cd9f41af8c3cf77d4930895b0aab3905bb9526d3b076203f6db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81eecf6df84e1cd9f41af8c3cf77d4930895b0aab3905bb9526d3b076203f6db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81eecf6df84e1cd9f41af8c3cf77d4930895b0aab3905bb9526d3b076203f6db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/277dd0c347dd6b09ac94d8faa64415d38212df11bcfad25f47d34b766826524a"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"277dd0c347dd6b09ac94d8faa64415d38212df11bcfad25f47d34b766826524a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81eecf6df84e1cd9f41af8c3cf77d4930895b0aab3905bb9526d3b076203f6db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b"}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81eecf6df84e1cd9f41af8c3cf77d4930895b0aab3905bb9526d3b076203f6db"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e54e4745547cfccdfb57c2019042f55a152a23e00425bc37d7bb8a77dd2de3cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e54e4745547cfccdfb57c2019042f55a152a23e00425bc37d7bb8a77dd2de3cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e54e4745547cfccdfb57c2019042f55a152a23e00425bc37d7bb8a77dd2de3cd"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e54e4745547cfccdfb57c2019042f55a152a23e00425bc37d7bb8a77dd2de3cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e54e4745547cfccdfb57c2019042f55a152a23e00425bc37d7bb8a77dd2de3cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e54e4745547cfccdfb57c2019042f55a152a23e00425bc37d7bb8a77dd2de3cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e54e4745547cfccdfb57c2019042f55a152a23e00425bc37d7bb8a77dd2de3cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c"}
{"level":"info","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f82758d855cd982aefe69cea87c1f208f4c7b8f4dcfa82ba7a072c0225bc26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e54e4745547cfccdfb57c2019042f55a152a23e00425bc37d7bb8a77dd2de3cd"}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f82758d855cd982aefe69cea87c1f208f4c7b8f4dcfa82ba7a072c0225bc26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f82758d855cd982aefe69cea87c1f208f4c7b8f4dcfa82ba7a072c0225bc26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f82758d855cd982aefe69cea87c1f208f4c7b8f4dcfa82ba7a072c0225bc26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f82758d855cd982aefe69cea87c1f208f4c7b8f4dcfa82ba7a072c0225bc26"}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f82758d855cd982aefe69cea87c1f208f4c7b8f4dcfa82ba7a072c0225bc26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96f82758d855cd982aefe69cea87c1f208f4c7b8f4dcfa82ba7a072c0225bc26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f82758d855cd982aefe69cea87c1f208f4c7b8f4dcfa82ba7a072c0225bc26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f82758d855cd982aefe69cea87c1f208f4c7b8f4dcfa82ba7a072c0225bc26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f82758d855cd982aefe69cea87c1f208f4c7b8f4dcfa82ba7a072c0225bc26"}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831"}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831"}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831"}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831"}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T17:59:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T17:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831"}
{"level":"info","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:53646","PortSpecifier":{"PortValue":53646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-c65a1b.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:53646","PortSpecifier":{"PortValue":53646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447206,"nanos":229145690},"http":{"id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","method":"POST","headers":{":authority":"e2e-inf-a-c65a1b.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea0ec84b91ccffe721a893d26ffd48383e658621356794a25ce877e7419fbd66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-c65a1b.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-c65a1b/test-model-c65a1b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38d1c0b5-61c5-47af-939b-1654caa23a2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:53654","PortSpecifier":{"PortValue":53654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","method":"POST","path":"/ai-tenant-e2e-inf-a-c65a1b/test-model-c65a1b/v1/chat/completions","host":"e2e-inf-a-c65a1b.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:53654","PortSpecifier":{"PortValue":53654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447210,"nanos":292536731},"http":{"id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","method":"POST","headers":{":authority":"e2e-inf-a-c65a1b.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-c65a1b/test-model-c65a1b/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GuO4KlUJiBGKVF1m_7WyWm7WE1WUqR5yk6mnur5rglVPqJOhui63EZKtvNds"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-c65a1b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GuO4KlUJiBGKVF1m_7WyWm7WE1WUqR5yk6mnur5rglVPqJOhui63EZKtvNds\"}"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-c65a1b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2d69d108-0057-4579-90da-dcdcb2377e35","keyName":"e2e-tenant-inference-c65a1b","subscription":"test-model-c65a1b-sub","tenant":"e2e-inf-a-c65a1b","userId":"2d69d108-0057-4579-90da-dcdcb2377e35","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-c65a1b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-c65a1b/test-model-c65a1b\",\"requestedSubscription\":\"test-model-c65a1b-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-c65a1b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-c65a1b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-c65a1b-sub","namespace":"ai-tenant-e2e-inf-a-c65a1b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-c65a1b/test-model-c65a1b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-c65a1b-sub"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2d69d108-0057-4579-90da-dcdcb2377e35","keyName":"e2e-tenant-inference-c65a1b","selected_subscription":"test-model-c65a1b-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-c65a1b/test-model-c65a1b-sub@ai-tenant-e2e-inf-a-c65a1b/test-model-c65a1b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-c65a1b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-c65a1b-sub","namespace":"ai-tenant-e2e-inf-a-c65a1b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79f39162-0b0f-4b87-8af0-6c10e0aba67e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:53670","PortSpecifier":{"PortValue":53670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-c65a1b.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:53670","PortSpecifier":{"PortValue":53670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447210,"nanos":610729490},"http":{"id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","method":"POST","headers":{":authority":"e2e-inf-a-c65a1b.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ea0ec84b91ccffe721a893d26ffd48383e658621356794a25ce877e7419fbd66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-c65a1b.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-c65a1b/test-model-c65a1b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6cf7783-4f8e-4da7-8efb-9e62002be7fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3edc8000-8391-43dd-8254-53fd5123d55e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:55976","PortSpecifier":{"PortValue":55976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3edc8000-8391-43dd-8254-53fd5123d55e","method":"POST","path":"/ai-tenant-e2e-inf-b-28127c/test-model-28127c/v1/chat/completions","host":"e2e-inf-b-28127c.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3edc8000-8391-43dd-8254-53fd5123d55e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:55976","PortSpecifier":{"PortValue":55976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447210,"nanos":653776164},"http":{"id":"3edc8000-8391-43dd-8254-53fd5123d55e","method":"POST","headers":{":authority":"e2e-inf-b-28127c.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-28127c/test-model-28127c/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3edc8000-8391-43dd-8254-53fd5123d55e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14W3gSBctZI0oRjLJ_Gdw2cmWls1AVZ9SKpJrEHLCyHuXOkYHES8lPSQF2Qj2"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3edc8000-8391-43dd-8254-53fd5123d55e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-28127c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14W3gSBctZI0oRjLJ_Gdw2cmWls1AVZ9SKpJrEHLCyHuXOkYHES8lPSQF2Qj2\"}"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3edc8000-8391-43dd-8254-53fd5123d55e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-28127c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"3edc8000-8391-43dd-8254-53fd5123d55e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-28127c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3edc8000-8391-43dd-8254-53fd5123d55e","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-28127c.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-28127c/test-model-28127c/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"3edc8000-8391-43dd-8254-53fd5123d55e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3edc8000-8391-43dd-8254-53fd5123d55e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T18:00:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3edc8000-8391-43dd-8254-53fd5123d55e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f20c7d3118ff5008db20446932149690bd538de9ffa183c393ab3d06e56809b"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/976809f89e577040daf259e50c127f59cb6a160d87d032f08693b275b028bbee"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e49343b8de044b683c934adf9f04414b10d6e5ed423f40d610a1bbace8fd649c"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1b10e8e1bd391bd34aa3f46533702fe0516dc046570fe9c7335a6cd2658cbeb"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e54e4745547cfccdfb57c2019042f55a152a23e00425bc37d7bb8a77dd2de3cd"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc974675e6e7ed498daba56819dd7d50a7c0e82579acbe3e26213eba8e8cf446"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c73a61a50db4a1358b2341ee64883dad02a1212a64739575734b7e5f9297831"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96f82758d855cd982aefe69cea87c1f208f4c7b8f4dcfa82ba7a072c0225bc26"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea0ec84b91ccffe721a893d26ffd48383e658621356794a25ce877e7419fbd66"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2590650c4f3d2943b797bd2bbe049c9aae042785e7a16afb3febb3a19b06ac51"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b31c38db4b724efbbf14997ccd284df4c68906791bd3e516d81217c3be6b2ce5"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bb2de265e79abc34d5f047e9a108507c4653afde48aa8da6232116e662f2e87"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/146da573f05f176f50808cc4198c3c632447908545b7a5367091c926175c38f0"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5daa62ba5316771ec0012d985faa985b0cbd2dc672eca023a9e116a29275874"}
{"level":"info","ts":"2026-07-07T18:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c07c35a211b260693272fa6fdec25a28909d7907131094fff03d61213f749bc7"}
{"level":"info","ts":"2026-07-07T18:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7637764529dd8fae6a6ba45fb5f6a80991cc6129bcda318a2bd8c6e15607c2c6"}
{"level":"info","ts":"2026-07-07T18:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2b681897f1f9c44e7230b9ef1ece5924b0c4637cfbccc02958431014ede6627"}
{"level":"info","ts":"2026-07-07T18:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/277dd0c347dd6b09ac94d8faa64415d38212df11bcfad25f47d34b766826524a"}
{"level":"info","ts":"2026-07-07T18:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2615a62383a44918b779d320a284111952afe9228a24d02fd7287c45e11c1f28"}
{"level":"info","ts":"2026-07-07T18:01:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81eecf6df84e1cd9f41af8c3cf77d4930895b0aab3905bb9526d3b076203f6db"}
{"level":"debug","ts":"2026-07-07T18:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:01:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:01:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2"}
{"level":"debug","ts":"2026-07-07T18:01:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2"}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2"}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e"}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e"}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e"}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e"}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e"}
{"level":"debug","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:01:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8"}
{"level":"error","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8"}
{"level":"debug","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15394bd282e330d4b9f34a908169a8daa4e930acabb87485dd484d741ea5c433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15394bd282e330d4b9f34a908169a8daa4e930acabb87485dd484d741ea5c433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15394bd282e330d4b9f34a908169a8daa4e930acabb87485dd484d741ea5c433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15394bd282e330d4b9f34a908169a8daa4e930acabb87485dd484d741ea5c433"}
{"level":"info","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15394bd282e330d4b9f34a908169a8daa4e930acabb87485dd484d741ea5c433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15394bd282e330d4b9f34a908169a8daa4e930acabb87485dd484d741ea5c433"}
{"level":"debug","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15394bd282e330d4b9f34a908169a8daa4e930acabb87485dd484d741ea5c433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15394bd282e330d4b9f34a908169a8daa4e930acabb87485dd484d741ea5c433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15394bd282e330d4b9f34a908169a8daa4e930acabb87485dd484d741ea5c433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15394bd282e330d4b9f34a908169a8daa4e930acabb87485dd484d741ea5c433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8"}
{"level":"info","ts":"2026-07-07T18:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15394bd282e330d4b9f34a908169a8daa4e930acabb87485dd484d741ea5c433"}
{"level":"info","ts":"2026-07-07T18:01:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5cb13b03b77499c4ea95dc3164bbbbb84a6184d5c08cb3d10c7be1ef072a88e"}
{"level":"info","ts":"2026-07-07T18:01:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d8ee39acecfb13ca9ead33a5872ee6f6b7e491a8e3ceb546b5ac7cde9dd3bd2"}
{"level":"info","ts":"2026-07-07T18:01:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15394bd282e330d4b9f34a908169a8daa4e930acabb87485dd484d741ea5c433"}
{"level":"info","ts":"2026-07-07T18:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11b8efd615d29960c82ee3f37207a5bde31355bb5f4a10d2806b574b785748d8"}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5"}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5"}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"974b4016d880d35d17d0e76ffdf8b4f8c941ccc738e970acaa9ea1b9fc32c22d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974b4016d880d35d17d0e76ffdf8b4f8c941ccc738e970acaa9ea1b9fc32c22d"}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"974b4016d880d35d17d0e76ffdf8b4f8c941ccc738e970acaa9ea1b9fc32c22d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"974b4016d880d35d17d0e76ffdf8b4f8c941ccc738e970acaa9ea1b9fc32c22d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["974b4016d880d35d17d0e76ffdf8b4f8c941ccc738e970acaa9ea1b9fc32c22d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5"}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"974b4016d880d35d17d0e76ffdf8b4f8c941ccc738e970acaa9ea1b9fc32c22d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974b4016d880d35d17d0e76ffdf8b4f8c941ccc738e970acaa9ea1b9fc32c22d"}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"974b4016d880d35d17d0e76ffdf8b4f8c941ccc738e970acaa9ea1b9fc32c22d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5"}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974b4016d880d35d17d0e76ffdf8b4f8c941ccc738e970acaa9ea1b9fc32c22d"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"242371936cb040f8096a4ef45423069cc3ca2f578489dd462f96f07bb53a5f13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"242371936cb040f8096a4ef45423069cc3ca2f578489dd462f96f07bb53a5f13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/242371936cb040f8096a4ef45423069cc3ca2f578489dd462f96f07bb53a5f13"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"242371936cb040f8096a4ef45423069cc3ca2f578489dd462f96f07bb53a5f13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["242371936cb040f8096a4ef45423069cc3ca2f578489dd462f96f07bb53a5f13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"242371936cb040f8096a4ef45423069cc3ca2f578489dd462f96f07bb53a5f13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/242371936cb040f8096a4ef45423069cc3ca2f578489dd462f96f07bb53a5f13"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"242371936cb040f8096a4ef45423069cc3ca2f578489dd462f96f07bb53a5f13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112"}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112"}
{"level":"error","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba21726d449ff0b456a8992d15c604ac7e6a46fa95a6737a2acab0426b2f1d54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba21726d449ff0b456a8992d15c604ac7e6a46fa95a6737a2acab0426b2f1d54"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba21726d449ff0b456a8992d15c604ac7e6a46fa95a6737a2acab0426b2f1d54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba21726d449ff0b456a8992d15c604ac7e6a46fa95a6737a2acab0426b2f1d54"}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba21726d449ff0b456a8992d15c604ac7e6a46fa95a6737a2acab0426b2f1d54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba21726d449ff0b456a8992d15c604ac7e6a46fa95a6737a2acab0426b2f1d54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142"}
{"level":"info","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a"}
{"level":"info","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba21726d449ff0b456a8992d15c604ac7e6a46fa95a6737a2acab0426b2f1d54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba21726d449ff0b456a8992d15c604ac7e6a46fa95a6737a2acab0426b2f1d54"}
{"level":"info","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba21726d449ff0b456a8992d15c604ac7e6a46fa95a6737a2acab0426b2f1d54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142"}
{"level":"info","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142"}
{"level":"debug","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142"}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424"}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424"}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424"}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0"}
{"level":"info","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0"}
{"level":"info","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0"}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0"}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0"}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0"}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f"}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f"}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f"}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a"}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad12639f6371c9b33ef9901eabb1e3560c00e8b4f4f5feb1b03b9b72b5203f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad12639f6371c9b33ef9901eabb1e3560c00e8b4f4f5feb1b03b9b72b5203f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad12639f6371c9b33ef9901eabb1e3560c00e8b4f4f5feb1b03b9b72b5203f5"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad12639f6371c9b33ef9901eabb1e3560c00e8b4f4f5feb1b03b9b72b5203f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad12639f6371c9b33ef9901eabb1e3560c00e8b4f4f5feb1b03b9b72b5203f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad12639f6371c9b33ef9901eabb1e3560c00e8b4f4f5feb1b03b9b72b5203f5"}
{"level":"error","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad12639f6371c9b33ef9901eabb1e3560c00e8b4f4f5feb1b03b9b72b5203f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dad12639f6371c9b33ef9901eabb1e3560c00e8b4f4f5feb1b03b9b72b5203f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad12639f6371c9b33ef9901eabb1e3560c00e8b4f4f5feb1b03b9b72b5203f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad12639f6371c9b33ef9901eabb1e3560c00e8b4f4f5feb1b03b9b72b5203f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad12639f6371c9b33ef9901eabb1e3560c00e8b4f4f5feb1b03b9b72b5203f5"}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e"}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3abebf78ffbbb64ece0d72d677d67543dd4dea815811853be9481caaf0b59972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3abebf78ffbbb64ece0d72d677d67543dd4dea815811853be9481caaf0b59972"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3abebf78ffbbb64ece0d72d677d67543dd4dea815811853be9481caaf0b59972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3abebf78ffbbb64ece0d72d677d67543dd4dea815811853be9481caaf0b59972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3abebf78ffbbb64ece0d72d677d67543dd4dea815811853be9481caaf0b59972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3abebf78ffbbb64ece0d72d677d67543dd4dea815811853be9481caaf0b59972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3abebf78ffbbb64ece0d72d677d67543dd4dea815811853be9481caaf0b59972"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3abebf78ffbbb64ece0d72d677d67543dd4dea815811853be9481caaf0b59972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3abebf78ffbbb64ece0d72d677d67543dd4dea815811853be9481caaf0b59972"}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb"}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:03:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e"}
{"level":"info","ts":"2026-07-07T18:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb"}
{"level":"info","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60094","PortSpecifier":{"PortValue":60094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60094","PortSpecifier":{"PortValue":60094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447423,"nanos":768176638},"http":{"id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/auth-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef3b2662-ef26-4ef5-a15b-8c5dd3319b6d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2628e299-5607-4966-81f7-e88d624d0511","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:49000","PortSpecifier":{"PortValue":49000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2628e299-5607-4966-81f7-e88d624d0511","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2628e299-5607-4966-81f7-e88d624d0511","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:49000","PortSpecifier":{"PortValue":49000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447423,"nanos":836737554},"http":{"id":"2628e299-5607-4966-81f7-e88d624d0511","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2628e299-5607-4966-81f7-e88d624d0511","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2628e299-5607-4966-81f7-e88d624d0511","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2628e299-5607-4966-81f7-e88d624d0511","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2628e299-5607-4966-81f7-e88d624d0511","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2628e299-5607-4966-81f7-e88d624d0511","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2628e299-5607-4966-81f7-e88d624d0511","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/auth-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2628e299-5607-4966-81f7-e88d624d0511","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2628e299-5607-4966-81f7-e88d624d0511","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2628e299-5607-4966-81f7-e88d624d0511","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2628e299-5607-4966-81f7-e88d624d0511","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2628e299-5607-4966-81f7-e88d624d0511","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60106","PortSpecifier":{"PortValue":60106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","method":"GET","path":"/maas-api/v1/api-keys/a635adb4-69e7-412d-bb69-aca5c670cf73","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60106","PortSpecifier":{"PortValue":60106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447423,"nanos":926348668},"http":{"id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","method":"GET","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a635adb4-69e7-412d-bb69-aca5c670cf73",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a635adb4-69e7-412d-bb69-aca5c670cf73",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/auth-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b3abc38-6da6-4191-ac9a-34792dcfb7a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:49004","PortSpecifier":{"PortValue":49004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","method":"GET","path":"/maas-api/v1/api-keys/e8799553-73a3-463a-9996-cada8d4088d4","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:49004","PortSpecifier":{"PortValue":49004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447423,"nanos":962698483},"http":{"id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","method":"GET","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e8799553-73a3-463a-9996-cada8d4088d4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e8799553-73a3-463a-9996-cada8d4088d4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/auth-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:03:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f089f98-79e7-4dde-aa8f-e95a891d06cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a78536a4-4d81-40b8-8674-f406418f8889","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33968","PortSpecifier":{"PortValue":33968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a78536a4-4d81-40b8-8674-f406418f8889","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a78536a4-4d81-40b8-8674-f406418f8889","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33968","PortSpecifier":{"PortValue":33968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447446,"nanos":474540284},"http":{"id":"a78536a4-4d81-40b8-8674-f406418f8889","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a78536a4-4d81-40b8-8674-f406418f8889","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a78536a4-4d81-40b8-8674-f406418f8889","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a78536a4-4d81-40b8-8674-f406418f8889","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a78536a4-4d81-40b8-8674-f406418f8889","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a78536a4-4d81-40b8-8674-f406418f8889","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a78536a4-4d81-40b8-8674-f406418f8889","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/auth-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a78536a4-4d81-40b8-8674-f406418f8889","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a78536a4-4d81-40b8-8674-f406418f8889","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a78536a4-4d81-40b8-8674-f406418f8889","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a78536a4-4d81-40b8-8674-f406418f8889","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a78536a4-4d81-40b8-8674-f406418f8889","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"930f6155-b915-4129-851a-fd84a446dd0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37976","PortSpecifier":{"PortValue":37976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"930f6155-b915-4129-851a-fd84a446dd0e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"930f6155-b915-4129-851a-fd84a446dd0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37976","PortSpecifier":{"PortValue":37976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447446,"nanos":517882496},"http":{"id":"930f6155-b915-4129-851a-fd84a446dd0e","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"930f6155-b915-4129-851a-fd84a446dd0e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"930f6155-b915-4129-851a-fd84a446dd0e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"930f6155-b915-4129-851a-fd84a446dd0e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"930f6155-b915-4129-851a-fd84a446dd0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"930f6155-b915-4129-851a-fd84a446dd0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"930f6155-b915-4129-851a-fd84a446dd0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/auth-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"930f6155-b915-4129-851a-fd84a446dd0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"930f6155-b915-4129-851a-fd84a446dd0e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"930f6155-b915-4129-851a-fd84a446dd0e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"930f6155-b915-4129-851a-fd84a446dd0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"930f6155-b915-4129-851a-fd84a446dd0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33982","PortSpecifier":{"PortValue":33982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:33982","PortSpecifier":{"PortValue":33982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447446,"nanos":569678999},"http":{"id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","method":"GET","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-aK34h10lCzILWFs2_Gz8x8W4w9DgTy7W97Jk7N333riHY5WkeTjciPSqghkV"}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-aK34h10lCzILWFs2_Gz8x8W4w9DgTy7W97Jk7N333riHY5WkeTjciPSqghkV\"}"}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bd24b22-a319-4e53-b028-bb4c866b0fdf","keyName":"e2e-auth-iso-a-58e23c","subscription":"e2e-auth-iso-5c844c","tenant":"e2e-shared-a-8c0ae4","userId":"0bd24b22-a319-4e53-b028-bb4c866b0fdf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/auth-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5c844c"}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:04:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec5089c0-80a5-4bb1-8900-83ed9f55efee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41794","PortSpecifier":{"PortValue":41794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41794","PortSpecifier":{"PortValue":41794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447464,"nanos":199033597},"http":{"id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/auth-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b04c6fa6-094f-4e72-bd52-bff1cfb8541f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67be25ed-1f1b-4725-994f-fb479284725d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47956","PortSpecifier":{"PortValue":47956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67be25ed-1f1b-4725-994f-fb479284725d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67be25ed-1f1b-4725-994f-fb479284725d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47956","PortSpecifier":{"PortValue":47956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447464,"nanos":241687058},"http":{"id":"67be25ed-1f1b-4725-994f-fb479284725d","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67be25ed-1f1b-4725-994f-fb479284725d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67be25ed-1f1b-4725-994f-fb479284725d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67be25ed-1f1b-4725-994f-fb479284725d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67be25ed-1f1b-4725-994f-fb479284725d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67be25ed-1f1b-4725-994f-fb479284725d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67be25ed-1f1b-4725-994f-fb479284725d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/auth-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67be25ed-1f1b-4725-994f-fb479284725d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67be25ed-1f1b-4725-994f-fb479284725d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67be25ed-1f1b-4725-994f-fb479284725d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67be25ed-1f1b-4725-994f-fb479284725d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67be25ed-1f1b-4725-994f-fb479284725d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"657b54ed-6741-452c-9509-9bce237f19ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47966","PortSpecifier":{"PortValue":47966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"657b54ed-6741-452c-9509-9bce237f19ba","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"657b54ed-6741-452c-9509-9bce237f19ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47966","PortSpecifier":{"PortValue":47966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447464,"nanos":281697228},"http":{"id":"657b54ed-6741-452c-9509-9bce237f19ba","method":"GET","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"657b54ed-6741-452c-9509-9bce237f19ba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eHFyAtK5QCwm8QBs_5ndiulTsa5Dkxz2RcLkoY32nClTWNFdVc5U0OlCOeU"}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"657b54ed-6741-452c-9509-9bce237f19ba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b60419.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eHFyAtK5QCwm8QBs_5ndiulTsa5Dkxz2RcLkoY32nClTWNFdVc5U0OlCOeU\"}"}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"657b54ed-6741-452c-9509-9bce237f19ba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b60419.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"657b54ed-6741-452c-9509-9bce237f19ba","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"657b54ed-6741-452c-9509-9bce237f19ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"657b54ed-6741-452c-9509-9bce237f19ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"657b54ed-6741-452c-9509-9bce237f19ba","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T18:04:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"657b54ed-6741-452c-9509-9bce237f19ba","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:58926","PortSpecifier":{"PortValue":58926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:58926","PortSpecifier":{"PortValue":58926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447489,"nanos":17639718},"http":{"id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/auth-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c2e0e9a-c152-43ee-8afd-e3a72a65cb3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54396","PortSpecifier":{"PortValue":54396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c17830a-19ca-4a26-af93-6b3e89789894","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54396","PortSpecifier":{"PortValue":54396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447489,"nanos":57185516},"http":{"id":"4c17830a-19ca-4a26-af93-6b3e89789894","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/auth-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c17830a-19ca-4a26-af93-6b3e89789894","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0888e796-38da-49c5-841c-07c4d26299f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:58936","PortSpecifier":{"PortValue":58936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0888e796-38da-49c5-841c-07c4d26299f6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0888e796-38da-49c5-841c-07c4d26299f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:58936","PortSpecifier":{"PortValue":58936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447489,"nanos":100436557},"http":{"id":"0888e796-38da-49c5-841c-07c4d26299f6","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0888e796-38da-49c5-841c-07c4d26299f6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0888e796-38da-49c5-841c-07c4d26299f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0888e796-38da-49c5-841c-07c4d26299f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0888e796-38da-49c5-841c-07c4d26299f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0888e796-38da-49c5-841c-07c4d26299f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0888e796-38da-49c5-841c-07c4d26299f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/auth-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0888e796-38da-49c5-841c-07c4d26299f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0888e796-38da-49c5-841c-07c4d26299f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0888e796-38da-49c5-841c-07c4d26299f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0888e796-38da-49c5-841c-07c4d26299f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0888e796-38da-49c5-841c-07c4d26299f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54406","PortSpecifier":{"PortValue":54406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44954b1d-2d69-4db2-86ff-f83499b794f8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54406","PortSpecifier":{"PortValue":54406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447489,"nanos":138822043},"http":{"id":"44954b1d-2d69-4db2-86ff-f83499b794f8","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/auth-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44954b1d-2d69-4db2-86ff-f83499b794f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87a365a5-14ea-45de-9346-16900d53c27a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:43364","PortSpecifier":{"PortValue":43364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87a365a5-14ea-45de-9346-16900d53c27a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87a365a5-14ea-45de-9346-16900d53c27a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:43364","PortSpecifier":{"PortValue":43364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447511,"nanos":739227923},"http":{"id":"87a365a5-14ea-45de-9346-16900d53c27a","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87a365a5-14ea-45de-9346-16900d53c27a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87a365a5-14ea-45de-9346-16900d53c27a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87a365a5-14ea-45de-9346-16900d53c27a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87a365a5-14ea-45de-9346-16900d53c27a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87a365a5-14ea-45de-9346-16900d53c27a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87a365a5-14ea-45de-9346-16900d53c27a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/auth-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87a365a5-14ea-45de-9346-16900d53c27a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87a365a5-14ea-45de-9346-16900d53c27a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87a365a5-14ea-45de-9346-16900d53c27a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87a365a5-14ea-45de-9346-16900d53c27a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87a365a5-14ea-45de-9346-16900d53c27a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44296","PortSpecifier":{"PortValue":44296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44296","PortSpecifier":{"PortValue":44296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447511,"nanos":778232810},"http":{"id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/auth-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0687ef3-1e7b-4dee-bdd8-b47edf37b3db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44304","PortSpecifier":{"PortValue":44304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b776aa8-c1ef-4668-be5c-a71606913959","method":"GET","path":"/maas-api/v1/api-keys/5a46d24c-128c-4c90-89e0-5b010c1e6292","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44304","PortSpecifier":{"PortValue":44304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447511,"nanos":827880104},"http":{"id":"1b776aa8-c1ef-4668-be5c-a71606913959","method":"GET","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5a46d24c-128c-4c90-89e0-5b010c1e6292",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5a46d24c-128c-4c90-89e0-5b010c1e6292",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/auth-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b776aa8-c1ef-4668-be5c-a71606913959","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:43374","PortSpecifier":{"PortValue":43374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","method":"GET","path":"/maas-api/v1/api-keys/5a46d24c-128c-4c90-89e0-5b010c1e6292","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:43374","PortSpecifier":{"PortValue":43374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447511,"nanos":869150869},"http":{"id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","method":"GET","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5a46d24c-128c-4c90-89e0-5b010c1e6292",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5a46d24c-128c-4c90-89e0-5b010c1e6292",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/auth-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d597530-1316-474c-9e9b-bfb7aa3c4172","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60974","PortSpecifier":{"PortValue":60974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60974","PortSpecifier":{"PortValue":60974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447527,"nanos":984399630},"http":{"id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/auth-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:05:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4476d9a-a8a8-4136-abfe-fc8b8203fc56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45880","PortSpecifier":{"PortValue":45880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45880","PortSpecifier":{"PortValue":45880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447528,"nanos":22321390},"http":{"id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/auth-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfc3f6f2-25e0-4259-b1d7-d21037e65db7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60986","PortSpecifier":{"PortValue":60986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25359d19-b99c-4bce-9de5-a179922fdcca","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60986","PortSpecifier":{"PortValue":60986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447528,"nanos":59450335},"http":{"id":"25359d19-b99c-4bce-9de5-a179922fdcca","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KYGEr2vwTMmsdJR1_uKqIvST9WE5ZOyEUfCrRDxw9K346fSFqmc6ENhEtdAG"}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KYGEr2vwTMmsdJR1_uKqIvST9WE5ZOyEUfCrRDxw9K346fSFqmc6ENhEtdAG\"}"}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7475ab5-3a3b-43ef-9d1b-2e23c8ed80c0","keyName":"e2e-auth-iso-a-81e1a7","subscription":"e2e-auth-iso-78d263","tenant":"e2e-shared-a-8c0ae4","userId":"d7475ab5-3a3b-43ef-9d1b-2e23c8ed80c0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/auth-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-78d263"}
{"level":"info","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:05:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25359d19-b99c-4bce-9de5-a179922fdcca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5debc4a42a75aee9b622af22ae3069671d83d15d95103a6829d9ab013a044d0"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/974b4016d880d35d17d0e76ffdf8b4f8c941ccc738e970acaa9ea1b9fc32c22d"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b288c4b9d906289d343399d078906f198c09fd07458ee16400bc73109e551424"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beccc9c04fb561a36f42533947949143e40604e62c8f6ac22db58617ce15b0b5"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bccc8df675a1692b4b1a4e92cc8cad0088dea5379e4d297ac9f2c8db777de39f"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf0096e512f41e9113219ef200141190ce10e6bd33d5bb5ee05ad2ad8896c3a8"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e270acfc9f6a4c0a35b4d71292193bb12b5a4846a47d57bf1c2994890845112"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d1fdc703933ae2dba6e0d17e30b7771fc9360cf2bad6ddd473ee27426a78b0e"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad2f6f7f3f6841f259ea118f9bcf6753f90864ea0b7142c1a1b7243a602473cb"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a136e7eda03f0a2db7e13717fd6161470656e359a047fd62c1455a654f7382b"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/242371936cb040f8096a4ef45423069cc3ca2f578489dd462f96f07bb53a5f13"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dad12639f6371c9b33ef9901eabb1e3560c00e8b4f4f5feb1b03b9b72b5203f5"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3abebf78ffbbb64ece0d72d677d67543dd4dea815811853be9481caaf0b59972"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/031ffdbccf02ae4428b151eeee9e88b8711e1e8af4e16e7eaf68dd77f6f6bd3a"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bba64bb66c71920ee511e27ed8615ac55ff7cb29e3966957979f236ccadfc10f"}
{"level":"info","ts":"2026-07-07T18:05:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba21726d449ff0b456a8992d15c604ac7e6a46fa95a6737a2acab0426b2f1d54"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e"}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733"}
{"level":"error","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733"}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad78a66ee60af471f4fde07f2100ad2dc25c083710f52114a34d8a0abcb5fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f"}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad78a66ee60af471f4fde07f2100ad2dc25c083710f52114a34d8a0abcb5fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad78a66ee60af471f4fde07f2100ad2dc25c083710f52114a34d8a0abcb5fa4"}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bad78a66ee60af471f4fde07f2100ad2dc25c083710f52114a34d8a0abcb5fa4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bad78a66ee60af471f4fde07f2100ad2dc25c083710f52114a34d8a0abcb5fa4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f"}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bad78a66ee60af471f4fde07f2100ad2dc25c083710f52114a34d8a0abcb5fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad78a66ee60af471f4fde07f2100ad2dc25c083710f52114a34d8a0abcb5fa4"}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bad78a66ee60af471f4fde07f2100ad2dc25c083710f52114a34d8a0abcb5fa4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733"}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f"}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad78a66ee60af471f4fde07f2100ad2dc25c083710f52114a34d8a0abcb5fa4"}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912"}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5"}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912"}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5"}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912"}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5"}
{"level":"info","ts":"2026-07-07T18:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b"}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b"}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196"}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196"}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b"}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14"}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc"}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc"}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7"}
{"level":"error","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7"}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc"}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfe91b0350a3a9d297537fea930d909445413a258197a8e39841e2c0306be66a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfe91b0350a3a9d297537fea930d909445413a258197a8e39841e2c0306be66a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfe91b0350a3a9d297537fea930d909445413a258197a8e39841e2c0306be66a"}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfe91b0350a3a9d297537fea930d909445413a258197a8e39841e2c0306be66a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfe91b0350a3a9d297537fea930d909445413a258197a8e39841e2c0306be66a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7"}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfe91b0350a3a9d297537fea930d909445413a258197a8e39841e2c0306be66a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfe91b0350a3a9d297537fea930d909445413a258197a8e39841e2c0306be66a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfe91b0350a3a9d297537fea930d909445413a258197a8e39841e2c0306be66a"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e"}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:07:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfe91b0350a3a9d297537fea930d909445413a258197a8e39841e2c0306be66a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b"}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfe91b0350a3a9d297537fea930d909445413a258197a8e39841e2c0306be66a"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142"}
{"level":"debug","ts":"2026-07-07T18:07:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5"}
{"level":"debug","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196"}
{"level":"debug","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"}
{"level":"debug","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7"}
{"level":"debug","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f"}
{"level":"debug","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a"}
{"level":"debug","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bad78a66ee60af471f4fde07f2100ad2dc25c083710f52114a34d8a0abcb5fa4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615"}
{"level":"info","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"}
{"level":"info","ts":"2026-07-07T18:07:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bad78a66ee60af471f4fde07f2100ad2dc25c083710f52114a34d8a0abcb5fa4"}
{"level":"info","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:39372","PortSpecifier":{"PortValue":39372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:39372","PortSpecifier":{"PortValue":39372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447655,"nanos":878365810},"http":{"id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/sub-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19f5a9a1-c38a-4c8c-9c05-9a876a9f9e12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37566","PortSpecifier":{"PortValue":37566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcd20b2f-4da9-476d-906f-5740f0deb238","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37566","PortSpecifier":{"PortValue":37566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447655,"nanos":922652016},"http":{"id":"fcd20b2f-4da9-476d-906f-5740f0deb238","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/sub-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcd20b2f-4da9-476d-906f-5740f0deb238","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:39376","PortSpecifier":{"PortValue":39376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:39376","PortSpecifier":{"PortValue":39376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447655,"nanos":967165594},"http":{"id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","method":"GET","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dWR0mN5x9AQsAMSe_W4fOapR5Y218ZKDcMRhpuGlCd7JRleQNepuM6GTWQiA"}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dWR0mN5x9AQsAMSe_W4fOapR5Y218ZKDcMRhpuGlCd7JRleQNepuM6GTWQiA\"}"}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d002835-4970-46a4-97fb-c73671ad1fd7","keyName":"e2e-sub-iso-ac9a64","subscription":"e2e-a-only-ff8f65","tenant":"e2e-shared-a-8c0ae4","userId":"6d002835-4970-46a4-97fb-c73671ad1fd7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/sub-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-ff8f65"}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e7764c8-c1b0-449e-9cc3-b3b48bd27960","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37568","PortSpecifier":{"PortValue":37568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37568","PortSpecifier":{"PortValue":37568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447656,"nanos":13009929},"http":{"id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","method":"GET","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lkzP6ARWXgFi1LqS_42NEcmy8bpmb9wwodarPi9O2R3OXKPj4PryXPFmaY3D"}
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b60419.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lkzP6ARWXgFi1LqS_42NEcmy8bpmb9wwodarPi9O2R3OXKPj4PryXPFmaY3D\"}"}
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b60419.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4b0d7bf0-03d4-46cd-893a-29bf109c3ba4","keyName":"e2e-sub-iso-b0fa64","subscription":"e2e-b-only-ff8f65","tenant":"e2e-shared-b-b60419","userId":"4b0d7bf0-03d4-46cd-893a-29bf109c3ba4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/sub-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-ff8f65"}
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:07:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a566e7e-fa2a-41bd-9f70-6cc1da3d62c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57058","PortSpecifier":{"PortValue":57058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57058","PortSpecifier":{"PortValue":57058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447673,"nanos":396807101},"http":{"id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/sub-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3611a585-8ff1-4470-9f68-9ea2c46e7b4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34488","PortSpecifier":{"PortValue":34488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34488","PortSpecifier":{"PortValue":34488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447673,"nanos":436961818},"http":{"id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/sub-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a95a1b3-5c66-438c-91d2-3dda369ede62","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"061d289b-e060-4657-9d65-79b745500a4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57070","PortSpecifier":{"PortValue":57070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"061d289b-e060-4657-9d65-79b745500a4e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"061d289b-e060-4657-9d65-79b745500a4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57070","PortSpecifier":{"PortValue":57070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447673,"nanos":479134524},"http":{"id":"061d289b-e060-4657-9d65-79b745500a4e","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"061d289b-e060-4657-9d65-79b745500a4e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dv3SNE2TM8vuCpv8_A1cFwJkFvwzEdrTmh8EGvXixR0xmKzRmJmMMg02Y1od"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"061d289b-e060-4657-9d65-79b745500a4e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dv3SNE2TM8vuCpv8_A1cFwJkFvwzEdrTmh8EGvXixR0xmKzRmJmMMg02Y1od\"}"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"061d289b-e060-4657-9d65-79b745500a4e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b022600-2e18-4941-8c6b-aa3d542ae5e7","keyName":"e2e-sub-iso-872c25","subscription":"e2e-shared-sub-f0d55e","tenant":"e2e-shared-a-8c0ae4","userId":"7b022600-2e18-4941-8c6b-aa3d542ae5e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"061d289b-e060-4657-9d65-79b745500a4e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"061d289b-e060-4657-9d65-79b745500a4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"061d289b-e060-4657-9d65-79b745500a4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"061d289b-e060-4657-9d65-79b745500a4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/sub-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"061d289b-e060-4657-9d65-79b745500a4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"061d289b-e060-4657-9d65-79b745500a4e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f0d55e"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"061d289b-e060-4657-9d65-79b745500a4e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"061d289b-e060-4657-9d65-79b745500a4e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"061d289b-e060-4657-9d65-79b745500a4e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"061d289b-e060-4657-9d65-79b745500a4e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34490","PortSpecifier":{"PortValue":34490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34490","PortSpecifier":{"PortValue":34490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447673,"nanos":510194753},"http":{"id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Q9vur2kBF3byWqbo_BhigdYexnDWoKGROVjP7RqnmN706dxXssXJun1gSlxU"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b60419.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Q9vur2kBF3byWqbo_BhigdYexnDWoKGROVjP7RqnmN706dxXssXJun1gSlxU\"}"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b60419.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49e68dad-c06c-46ab-9bb3-29a09f9945e0","keyName":"e2e-sub-iso-fc720c","subscription":"e2e-shared-sub-f0d55e","tenant":"e2e-shared-b-b60419","userId":"49e68dad-c06c-46ab-9bb3-29a09f9945e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/sub-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f0d55e"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:07:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f856cfc9-e67b-4317-8098-32e0bb71fe18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67240bcfc1577b121aaa5f23d023e47e106c0af96d54f4caa0f824a89ed3158f"}
{"level":"info","ts":"2026-07-07T18:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64d1b21c6d6b832da56999327fb82332d8c71ac316daf518d7aa89140f118733"}
{"level":"info","ts":"2026-07-07T18:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b23ea98c6b552c2f29e76287f1e2c309331c42c4ee77b5d6ff75d8cded0d935c"}
{"level":"info","ts":"2026-07-07T18:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d443f446050d6b4712eae36e3ba6b66ee8dfa65056271bb300f1adb32b909d5"}
{"level":"info","ts":"2026-07-07T18:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fa10c27ddce29b4e639a7882139cb392451eb12d555203cae35c122ea12b912"}
{"level":"info","ts":"2026-07-07T18:07:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bad78a66ee60af471f4fde07f2100ad2dc25c083710f52114a34d8a0abcb5fa4"}
{"level":"info","ts":"2026-07-07T18:07:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5dbf16a8e4756ea7862e3a1d6a804564e3ea1df091db822f9512fc633bf986e"}
{"level":"info","ts":"2026-07-07T18:07:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14823cf3c94c4e2887e9c0a94a8140fe465eb3a54819ee3bf601ad67eecbfd7b"}
{"level":"info","ts":"2026-07-07T18:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6d15fde83393afffc60242394f4cbfee1b423b700e1743818fb046839854fc3"}
{"level":"info","ts":"2026-07-07T18:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ceba987659e309d7f20c31a3871438b89817b1cb83cdacb8fd473c49c6e8be7"}
{"level":"info","ts":"2026-07-07T18:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f5612c9128aeeb87d6c7809803bac70d43e9462fc58793ae65db1e82ac00615"}
{"level":"info","ts":"2026-07-07T18:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfe91b0350a3a9d297537fea930d909445413a258197a8e39841e2c0306be66a"}
{"level":"info","ts":"2026-07-07T18:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/008d3938d8fdc9f0b7cebd60d6118fbed5917c15e10d6d77c3e581863c129196"}
{"level":"info","ts":"2026-07-07T18:08:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a24569ad2029748f697e370434eb00a886262d8a9ad4afcd5016d25544d78bc"}
{"level":"info","ts":"2026-07-07T18:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c050d63ce5b7ab2cedf373c1be0f6e6e7eea934a013c63af9d8d52285d8d74b"}
{"level":"info","ts":"2026-07-07T18:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d46dabf0f4c0de6f1b096904369bdb0761f44a4cd3edf23ff4895f0233abb14"}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411"}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411"}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411"}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411"}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411"}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922"}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922"}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922"}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401"}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401"}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401"}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401"}
{"level":"info","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bafa6afb9450fadc3e134b98253422711570b5b629d45e9ef919d5a83ffca979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bafa6afb9450fadc3e134b98253422711570b5b629d45e9ef919d5a83ffca979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bafa6afb9450fadc3e134b98253422711570b5b629d45e9ef919d5a83ffca979"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bafa6afb9450fadc3e134b98253422711570b5b629d45e9ef919d5a83ffca979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bafa6afb9450fadc3e134b98253422711570b5b629d45e9ef919d5a83ffca979"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bafa6afb9450fadc3e134b98253422711570b5b629d45e9ef919d5a83ffca979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bafa6afb9450fadc3e134b98253422711570b5b629d45e9ef919d5a83ffca979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bafa6afb9450fadc3e134b98253422711570b5b629d45e9ef919d5a83ffca979"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d"}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"info","ts":"2026-07-07T18:08:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d"}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d"}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d"}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d"}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2"}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2"}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2"}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1"}
{"level":"debug","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1"}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f"}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f"}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"050e1ce9920df307279906104fc14a474d82ee6f803e64004ed9b26c28dc29b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"050e1ce9920df307279906104fc14a474d82ee6f803e64004ed9b26c28dc29b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050e1ce9920df307279906104fc14a474d82ee6f803e64004ed9b26c28dc29b8"}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"050e1ce9920df307279906104fc14a474d82ee6f803e64004ed9b26c28dc29b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["050e1ce9920df307279906104fc14a474d82ee6f803e64004ed9b26c28dc29b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"050e1ce9920df307279906104fc14a474d82ee6f803e64004ed9b26c28dc29b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050e1ce9920df307279906104fc14a474d82ee6f803e64004ed9b26c28dc29b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2"}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050e1ce9920df307279906104fc14a474d82ee6f803e64004ed9b26c28dc29b8"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742"}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742"}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742"}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742"}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142"}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142"}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142"}
{"level":"error","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f"}
{"level":"debug","ts":"2026-07-07T18:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1"}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T18:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d"}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"050e1ce9920df307279906104fc14a474d82ee6f803e64004ed9b26c28dc29b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/050e1ce9920df307279906104fc14a474d82ee6f803e64004ed9b26c28dc29b8"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2"}
{"level":"debug","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bafa6afb9450fadc3e134b98253422711570b5b629d45e9ef919d5a83ffca979","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401"}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922"}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2"}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742"}
{"level":"info","ts":"2026-07-07T18:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bafa6afb9450fadc3e134b98253422711570b5b629d45e9ef919d5a83ffca979"}
{"level":"info","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51282","PortSpecifier":{"PortValue":51282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51282","PortSpecifier":{"PortValue":51282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447749,"nanos":499363223},"http":{"id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f4baf7f-08ff-4a3d-8a36-7a9e914c7775","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41838","PortSpecifier":{"PortValue":41838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:41838","PortSpecifier":{"PortValue":41838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447749,"nanos":552401648},"http":{"id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/rate-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e89ee3d1-1515-4b4d-b37f-8e4205fcef4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51284","PortSpecifier":{"PortValue":51284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","method":"POST","path":"/ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4/v1/completions","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51284","PortSpecifier":{"PortValue":51284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447749,"nanos":604942587},"http":{"id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GoBOjwgqL6xEXecO_y7PHiNpH7sGkecOT3lFFLBfj5DtHvzGbAGfjZydRXPi"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GoBOjwgqL6xEXecO_y7PHiNpH7sGkecOT3lFFLBfj5DtHvzGbAGfjZydRXPi\"}"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"faedfcc7-2024-4493-b09b-d41e1527d23d","keyName":"e2e-rate-a-b24265","subscription":"e2e-rate-iso-a-b24265","tenant":"e2e-shared-a-8c0ae4","userId":"faedfcc7-2024-4493-b09b-d41e1527d23d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\",\"requestedSubscription\":\"e2e-rate-iso-a-b24265\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c0ae4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b24265","namespace":"ai-tenant-e2e-shared-a-8c0ae4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b24265"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"faedfcc7-2024-4493-b09b-d41e1527d23d","keyName":"e2e-rate-a-b24265","selected_subscription":"e2e-rate-iso-a-b24265","selected_subscription_key":"ai-tenant-e2e-shared-a-8c0ae4/e2e-rate-iso-a-b24265@ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c0ae4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b24265","namespace":"ai-tenant-e2e-shared-a-8c0ae4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:09:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cb6259d-182e-43c7-88c8-da6d60d890ed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51294","PortSpecifier":{"PortValue":51294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a3a664a-c62b-4c88-9390-d60787d65058","method":"POST","path":"/ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4/v1/completions","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51294","PortSpecifier":{"PortValue":51294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447750,"nanos":671806839},"http":{"id":"2a3a664a-c62b-4c88-9390-d60787d65058","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GoBOjwgqL6xEXecO_y7PHiNpH7sGkecOT3lFFLBfj5DtHvzGbAGfjZydRXPi"}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GoBOjwgqL6xEXecO_y7PHiNpH7sGkecOT3lFFLBfj5DtHvzGbAGfjZydRXPi\"}"}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"faedfcc7-2024-4493-b09b-d41e1527d23d","keyName":"e2e-rate-a-b24265","subscription":"e2e-rate-iso-a-b24265","tenant":"e2e-shared-a-8c0ae4","userId":"faedfcc7-2024-4493-b09b-d41e1527d23d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\",\"requestedSubscription\":\"e2e-rate-iso-a-b24265\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c0ae4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b24265","namespace":"ai-tenant-e2e-shared-a-8c0ae4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b24265"}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"faedfcc7-2024-4493-b09b-d41e1527d23d","keyName":"e2e-rate-a-b24265","selected_subscription":"e2e-rate-iso-a-b24265","selected_subscription_key":"ai-tenant-e2e-shared-a-8c0ae4/e2e-rate-iso-a-b24265@ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c0ae4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b24265","namespace":"ai-tenant-e2e-shared-a-8c0ae4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:09:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a3a664a-c62b-4c88-9390-d60787d65058","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:43736","PortSpecifier":{"PortValue":43736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","method":"POST","path":"/ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4/v1/completions","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:43736","PortSpecifier":{"PortValue":43736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447751,"nanos":708456532},"http":{"id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GoBOjwgqL6xEXecO_y7PHiNpH7sGkecOT3lFFLBfj5DtHvzGbAGfjZydRXPi"}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GoBOjwgqL6xEXecO_y7PHiNpH7sGkecOT3lFFLBfj5DtHvzGbAGfjZydRXPi\"}"}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"faedfcc7-2024-4493-b09b-d41e1527d23d","keyName":"e2e-rate-a-b24265","subscription":"e2e-rate-iso-a-b24265","tenant":"e2e-shared-a-8c0ae4","userId":"faedfcc7-2024-4493-b09b-d41e1527d23d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\",\"requestedSubscription\":\"e2e-rate-iso-a-b24265\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c0ae4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b24265","namespace":"ai-tenant-e2e-shared-a-8c0ae4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b24265"}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"faedfcc7-2024-4493-b09b-d41e1527d23d","keyName":"e2e-rate-a-b24265","selected_subscription":"e2e-rate-iso-a-b24265","selected_subscription_key":"ai-tenant-e2e-shared-a-8c0ae4/e2e-rate-iso-a-b24265@ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c0ae4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b24265","namespace":"ai-tenant-e2e-shared-a-8c0ae4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:09:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e367f27-5afe-4cd1-ad74-bacd86f8942d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54320","PortSpecifier":{"PortValue":54320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54320","PortSpecifier":{"PortValue":54320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447765,"nanos":570294530},"http":{"id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4672cfc3-c81e-45fc-b086-4fe3359bab81","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60444","PortSpecifier":{"PortValue":60444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60444","PortSpecifier":{"PortValue":60444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447765,"nanos":612046502},"http":{"id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"]}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba2afad00fa9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f57b6d79-79e6-48c1-9261-a82602b09bfb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8d05cb39-094e-4dbe-8b4c-57d2b7b0628b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/rate-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6124dcf9-e2b4-4a97-96c7-f738fa4d091f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54336","PortSpecifier":{"PortValue":54336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","method":"POST","path":"/ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4/v1/completions","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54336","PortSpecifier":{"PortValue":54336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447765,"nanos":653636914},"http":{"id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GXZ5Fk2CxtItbUWy_C2J9Kl3lQCfGnoNH0oLcU5ldGEET6kZqfhJraEKX2s4"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GXZ5Fk2CxtItbUWy_C2J9Kl3lQCfGnoNH0oLcU5ldGEET6kZqfhJraEKX2s4\"}"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"427d03cc-25d1-4c52-8a37-0a6f84f323c7","keyName":"e2e-rate-a-d33a3e","subscription":"e2e-rate-iso-a-d33a3e","tenant":"e2e-shared-a-8c0ae4","userId":"427d03cc-25d1-4c52-8a37-0a6f84f323c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\",\"requestedSubscription\":\"e2e-rate-iso-a-d33a3e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c0ae4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d33a3e","namespace":"ai-tenant-e2e-shared-a-8c0ae4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d33a3e"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"427d03cc-25d1-4c52-8a37-0a6f84f323c7","keyName":"e2e-rate-a-d33a3e","selected_subscription":"e2e-rate-iso-a-d33a3e","selected_subscription_key":"ai-tenant-e2e-shared-a-8c0ae4/e2e-rate-iso-a-d33a3e@ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c0ae4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d33a3e","namespace":"ai-tenant-e2e-shared-a-8c0ae4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:09:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63a83cfc-5d9d-964b-8396-fc8b3d8f6aeb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54350","PortSpecifier":{"PortValue":54350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6387169a-bdcc-4c65-a83e-4f80868274aa","method":"POST","path":"/ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4/v1/completions","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54350","PortSpecifier":{"PortValue":54350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447766,"nanos":695708073},"http":{"id":"6387169a-bdcc-4c65-a83e-4f80868274aa","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GXZ5Fk2CxtItbUWy_C2J9Kl3lQCfGnoNH0oLcU5ldGEET6kZqfhJraEKX2s4"}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GXZ5Fk2CxtItbUWy_C2J9Kl3lQCfGnoNH0oLcU5ldGEET6kZqfhJraEKX2s4\"}"}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"427d03cc-25d1-4c52-8a37-0a6f84f323c7","keyName":"e2e-rate-a-d33a3e","subscription":"e2e-rate-iso-a-d33a3e","tenant":"e2e-shared-a-8c0ae4","userId":"427d03cc-25d1-4c52-8a37-0a6f84f323c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\",\"requestedSubscription\":\"e2e-rate-iso-a-d33a3e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c0ae4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d33a3e","namespace":"ai-tenant-e2e-shared-a-8c0ae4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d33a3e"}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"427d03cc-25d1-4c52-8a37-0a6f84f323c7","keyName":"e2e-rate-a-d33a3e","selected_subscription":"e2e-rate-iso-a-d33a3e","selected_subscription_key":"ai-tenant-e2e-shared-a-8c0ae4/e2e-rate-iso-a-d33a3e@ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c0ae4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d33a3e","namespace":"ai-tenant-e2e-shared-a-8c0ae4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:09:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6387169a-bdcc-4c65-a83e-4f80868274aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54360","PortSpecifier":{"PortValue":54360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87801631-14ed-4e9e-b8e4-64308d51506e","method":"POST","path":"/ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4/v1/completions","host":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54360","PortSpecifier":{"PortValue":54360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447767,"nanos":736143928},"http":{"id":"87801631-14ed-4e9e-b8e4-64308d51506e","method":"POST","headers":{":authority":"e2e-shared-a-8c0ae4.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GXZ5Fk2CxtItbUWy_C2J9Kl3lQCfGnoNH0oLcU5ldGEET6kZqfhJraEKX2s4"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GXZ5Fk2CxtItbUWy_C2J9Kl3lQCfGnoNH0oLcU5ldGEET6kZqfhJraEKX2s4\"}"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"427d03cc-25d1-4c52-8a37-0a6f84f323c7","keyName":"e2e-rate-a-d33a3e","subscription":"e2e-rate-iso-a-d33a3e","tenant":"e2e-shared-a-8c0ae4","userId":"427d03cc-25d1-4c52-8a37-0a6f84f323c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\",\"requestedSubscription\":\"e2e-rate-iso-a-d33a3e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c0ae4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c0ae4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d33a3e","namespace":"ai-tenant-e2e-shared-a-8c0ae4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d33a3e"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"427d03cc-25d1-4c52-8a37-0a6f84f323c7","keyName":"e2e-rate-a-d33a3e","selected_subscription":"e2e-rate-iso-a-d33a3e","selected_subscription_key":"ai-tenant-e2e-shared-a-8c0ae4/e2e-rate-iso-a-d33a3e@ai-tenant-e2e-shared-a-8c0ae4/rate-test-model-8c0ae4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c0ae4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d33a3e","namespace":"ai-tenant-e2e-shared-a-8c0ae4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87801631-14ed-4e9e-b8e4-64308d51506e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60452","PortSpecifier":{"PortValue":60452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"341f63dd-c6c5-4058-8454-fa5de557e985","method":"POST","path":"/ai-tenant-e2e-shared-b-b60419/rate-test-model-b60419/v1/completions","host":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60452","PortSpecifier":{"PortValue":60452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783447767,"nanos":773883867},"http":{"id":"341f63dd-c6c5-4058-8454-fa5de557e985","method":"POST","headers":{":authority":"e2e-shared-b-b60419.apps.04a38e1a-b23a-458f-8490-ba2afad00fa9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b60419/rate-test-model-b60419/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TDApuLRUOfD8NofP_vsY6wjbuB1hZ8N3bmkKHUZvSgDZ7rVnf1IeBk3QsziR"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b60419.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TDApuLRUOfD8NofP_vsY6wjbuB1hZ8N3bmkKHUZvSgDZ7rVnf1IeBk3QsziR\"}"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b60419.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e6b5d493-321c-4b45-a83a-1006fd212ae8","keyName":"e2e-rate-b-d33a3e","subscription":"e2e-rate-iso-b-d33a3e","tenant":"e2e-shared-b-b60419","userId":"e6b5d493-321c-4b45-a83a-1006fd212ae8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b60419.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b60419/rate-test-model-b60419\",\"requestedSubscription\":\"e2e-rate-iso-b-d33a3e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b60419.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60419","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d33a3e","namespace":"ai-tenant-e2e-shared-b-b60419","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b60419/rate-test-model-b60419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d33a3e"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e6b5d493-321c-4b45-a83a-1006fd212ae8","keyName":"e2e-rate-b-d33a3e","selected_subscription":"e2e-rate-iso-b-d33a3e","selected_subscription_key":"ai-tenant-e2e-shared-b-b60419/e2e-rate-iso-b-d33a3e@ai-tenant-e2e-shared-b-b60419/rate-test-model-b60419","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60419","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d33a3e","namespace":"ai-tenant-e2e-shared-b-b60419","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T18:09:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"341f63dd-c6c5-4058-8454-fa5de557e985","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T18:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccd5f53a355c14c14a5377358845c09dec5d9b56221867570a84884e1873082d"}
{"level":"info","ts":"2026-07-07T18:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08fe6cfaec1bae8f75e5cd49e85a533a1baa64ec2217de9bd2ee5f2a2e183078"}
{"level":"info","ts":"2026-07-07T18:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/256612201d4e39eda0157f43190b08923d4e1638d47af6516825ec48cf803de4"}
{"level":"info","ts":"2026-07-07T18:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45e852aeb1af3da74c2ce9f8aa57eb364fbff8b7ada70c42ef56b5d654e20922"}
{"level":"info","ts":"2026-07-07T18:09:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bafa6afb9450fadc3e134b98253422711570b5b629d45e9ef919d5a83ffca979"}
{"level":"info","ts":"2026-07-07T18:09:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ad6aad8a62f0dc7c0f5c18908d75ff507fd9252bbda8f1e53951103a5db1782"}
{"level":"info","ts":"2026-07-07T18:09:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3630bf45a5b33a190b791d44596d07d5dce29d529e51edee97f9355cd48c401"}
{"level":"info","ts":"2026-07-07T18:09:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee9f86d68a857c512433c86dc5338e99a97c4690f0403f7d207222538a59e411"}
{"level":"info","ts":"2026-07-07T18:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/050e1ce9920df307279906104fc14a474d82ee6f803e64004ed9b26c28dc29b8"}
{"level":"info","ts":"2026-07-07T18:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77c1814b947ba34960bc43bfb1d86e2e4a6bb2ddb98536e0321a069ff74b37f1"}
{"level":"info","ts":"2026-07-07T18:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac5f85bda915464a921da075ff7948d1b5f4fede0afb5e825bb95688c1d5265d"}
{"level":"info","ts":"2026-07-07T18:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b220a1932409396e57849b5bf268f8651e84e8cabdccf790ef63615506557c04"}
{"level":"info","ts":"2026-07-07T18:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f64cbf7f2d584838c5d5376905198dca2a814835674e908fbb044f2d738c4c2"}
{"level":"info","ts":"2026-07-07T18:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76c28da8911e3c2d6e7c4370bf784151008a39b1b19f334083f959674f0b4742"}
{"level":"info","ts":"2026-07-07T18:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7abdcc7febeb3af7021fbf89fd1ea93225b2a0dc53d3738b1cb6bcafd12fceb2"}
{"level":"info","ts":"2026-07-07T18:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2a1549ee29b56197859f0c433b01bf8e5aff0d7f0ae1aad2f10559ada720142"}
{"level":"info","ts":"2026-07-07T18:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5a6f1236a35d7922cfc90989b8e0edbe909e1c820705599def52f2c89c00777"}
{"level":"info","ts":"2026-07-07T18:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a70602c4af46900fa9fcf02e4484f9a5d8a1fd260ca03b2bcbfba53151e9b7f"}
{"level":"info","ts":"2026-07-07T18:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5dc39fba26df57237d60c14571d54a49eec672447bda3937b1d380f1556b70a"}
{"level":"info","ts":"2026-07-07T18:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81548873126ee69584a5a051e03e0311d6a0d7a2bc219e802e1275e6124392a7"}