--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6befc0daabf7d654db96f244c949a9e4002b088e8c13d5138a8b6476bf19346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6befc0daabf7d654db96f244c949a9e4002b088e8c13d5138a8b6476bf19346","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6befc0daabf7d654db96f244c949a9e4002b088e8c13d5138a8b6476bf19346"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6befc0daabf7d654db96f244c949a9e4002b088e8c13d5138a8b6476bf19346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6befc0daabf7d654db96f244c949a9e4002b088e8c13d5138a8b6476bf19346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6befc0daabf7d654db96f244c949a9e4002b088e8c13d5138a8b6476bf19346","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f6a3ae636b9a2497fe573f6c7d87dd082d44fc33f49da7952105259b15f623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f6a3ae636b9a2497fe573f6c7d87dd082d44fc33f49da7952105259b15f623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f6a3ae636b9a2497fe573f6c7d87dd082d44fc33f49da7952105259b15f623"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6befc0daabf7d654db96f244c949a9e4002b088e8c13d5138a8b6476bf19346","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f6a3ae636b9a2497fe573f6c7d87dd082d44fc33f49da7952105259b15f623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f6a3ae636b9a2497fe573f6c7d87dd082d44fc33f49da7952105259b15f623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f6a3ae636b9a2497fe573f6c7d87dd082d44fc33f49da7952105259b15f623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6befc0daabf7d654db96f244c949a9e4002b088e8c13d5138a8b6476bf19346"}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f6a3ae636b9a2497fe573f6c7d87dd082d44fc33f49da7952105259b15f623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:30:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:30:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd"}
{"level":"info","ts":"2026-07-14T16:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f6a3ae636b9a2497fe573f6c7d87dd082d44fc33f49da7952105259b15f623"}
{"level":"info","ts":"2026-07-14T16:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513"}
{"level":"info","ts":"2026-07-14T16:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6"}
{"level":"error","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6"}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6"}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb"}
{"level":"error","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb"}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"}
{"level":"error","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"}
{"level":"error","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87"}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5"}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5"}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc2e1c33d5e92b9ae868b0b78d651560975ff40bf139dfa77fefca56ab5492fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc2e1c33d5e92b9ae868b0b78d651560975ff40bf139dfa77fefca56ab5492fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc2e1c33d5e92b9ae868b0b78d651560975ff40bf139dfa77fefca56ab5492fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc2e1c33d5e92b9ae868b0b78d651560975ff40bf139dfa77fefca56ab5492fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc2e1c33d5e92b9ae868b0b78d651560975ff40bf139dfa77fefca56ab5492fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3"}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc2e1c33d5e92b9ae868b0b78d651560975ff40bf139dfa77fefca56ab5492fb"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc2e1c33d5e92b9ae868b0b78d651560975ff40bf139dfa77fefca56ab5492fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc2e1c33d5e92b9ae868b0b78d651560975ff40bf139dfa77fefca56ab5492fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc2e1c33d5e92b9ae868b0b78d651560975ff40bf139dfa77fefca56ab5492fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc2e1c33d5e92b9ae868b0b78d651560975ff40bf139dfa77fefca56ab5492fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc2e1c33d5e92b9ae868b0b78d651560975ff40bf139dfa77fefca56ab5492fb"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c"}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c"}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c"}
{"level":"info","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6c29968-92b0-4d36-826d-76139f159871","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59372","PortSpecifier":{"PortValue":59372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6c29968-92b0-4d36-826d-76139f159871","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6c29968-92b0-4d36-826d-76139f159871","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59372","PortSpecifier":{"PortValue":59372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046664,"nanos":124847422},"http":{"id":"c6c29968-92b0-4d36-826d-76139f159871","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c6c29968-92b0-4d36-826d-76139f159871","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6c29968-92b0-4d36-826d-76139f159871","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6c29968-92b0-4d36-826d-76139f159871","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6c29968-92b0-4d36-826d-76139f159871","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6c29968-92b0-4d36-826d-76139f159871","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6c29968-92b0-4d36-826d-76139f159871","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/auth-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6c29968-92b0-4d36-826d-76139f159871","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6c29968-92b0-4d36-826d-76139f159871","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6c29968-92b0-4d36-826d-76139f159871","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6c29968-92b0-4d36-826d-76139f159871","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6c29968-92b0-4d36-826d-76139f159871","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51284","PortSpecifier":{"PortValue":51284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51284","PortSpecifier":{"PortValue":51284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046664,"nanos":181711980},"http":{"id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/auth-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ea056dd-49c7-453e-85e3-c0df46ca0811","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59380","PortSpecifier":{"PortValue":59380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa0c804a-eb54-4e20-82f2-21453886c313","method":"GET","path":"/maas-api/v1/api-keys/2e682e35-aa02-4322-8726-9181b6e9cae7","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59380","PortSpecifier":{"PortValue":59380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046664,"nanos":236884925},"http":{"id":"fa0c804a-eb54-4e20-82f2-21453886c313","method":"GET","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2e682e35-aa02-4322-8726-9181b6e9cae7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2e682e35-aa02-4322-8726-9181b6e9cae7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/auth-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa0c804a-eb54-4e20-82f2-21453886c313","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51296","PortSpecifier":{"PortValue":51296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d97f5441-07b2-4e61-ba76-49909c9d850d","method":"GET","path":"/maas-api/v1/api-keys/edf803c2-414c-4a56-9b27-19f8e86aed30","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51296","PortSpecifier":{"PortValue":51296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046664,"nanos":281337460},"http":{"id":"d97f5441-07b2-4e61-ba76-49909c9d850d","method":"GET","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/edf803c2-414c-4a56-9b27-19f8e86aed30",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/edf803c2-414c-4a56-9b27-19f8e86aed30",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/auth-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:31:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d97f5441-07b2-4e61-ba76-49909c9d850d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41420","PortSpecifier":{"PortValue":41420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41420","PortSpecifier":{"PortValue":41420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046681,"nanos":672004205},"http":{"id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/auth-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7719b779-7800-4c9c-9c87-0e31ea9d6543","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58486","PortSpecifier":{"PortValue":58486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58486","PortSpecifier":{"PortValue":58486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046681,"nanos":704886405},"http":{"id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/auth-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96692d2c-9254-4643-9cdb-98094fbb7a0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41432","PortSpecifier":{"PortValue":41432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbd877c2-3efd-4210-9e2a-377623c122f0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41432","PortSpecifier":{"PortValue":41432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046681,"nanos":745827473},"http":{"id":"cbd877c2-3efd-4210-9e2a-377623c122f0","method":"GET","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T5jtLU0gwPVLgRiQ_YaVlgMgfiO4B6P7PCquct2gpjy46148E4udlgctnceW"}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T5jtLU0gwPVLgRiQ_YaVlgMgfiO4B6P7PCquct2gpjy46148E4udlgctnceW\"}"}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1c513720-e339-4cd9-a4cc-1dfd2daea55c","keyName":"e2e-auth-iso-a-ded5e5","subscription":"e2e-auth-iso-da6a89","tenant":"e2e-shared-a-21b35e","userId":"1c513720-e339-4cd9-a4cc-1dfd2daea55c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/auth-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-da6a89"}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:31:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbd877c2-3efd-4210-9e2a-377623c122f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36358","PortSpecifier":{"PortValue":36358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36358","PortSpecifier":{"PortValue":36358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046699,"nanos":112935875},"http":{"id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/auth-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"148d0ac7-cc04-4d5e-9423-c87525fe8a1e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35042","PortSpecifier":{"PortValue":35042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35042","PortSpecifier":{"PortValue":35042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046699,"nanos":153576457},"http":{"id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/auth-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d40cee23-7e85-4c3b-aee9-0dbfb4af3fde","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4f870a2-2a0f-49e7-8951-05d6ae761cac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35058","PortSpecifier":{"PortValue":35058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4f870a2-2a0f-49e7-8951-05d6ae761cac","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4f870a2-2a0f-49e7-8951-05d6ae761cac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35058","PortSpecifier":{"PortValue":35058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046699,"nanos":194248119},"http":{"id":"c4f870a2-2a0f-49e7-8951-05d6ae761cac","method":"GET","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4f870a2-2a0f-49e7-8951-05d6ae761cac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mk50OxRpf1ZxA1uM_CSk5yK86Oq0tJlgOggSWWIPCQ1G2auKYX30m2x0WvHW"}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4f870a2-2a0f-49e7-8951-05d6ae761cac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4e27c0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mk50OxRpf1ZxA1uM_CSk5yK86Oq0tJlgOggSWWIPCQ1G2auKYX30m2x0WvHW\"}"}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4f870a2-2a0f-49e7-8951-05d6ae761cac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4e27c0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4f870a2-2a0f-49e7-8951-05d6ae761cac","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4f870a2-2a0f-49e7-8951-05d6ae761cac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c4f870a2-2a0f-49e7-8951-05d6ae761cac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4f870a2-2a0f-49e7-8951-05d6ae761cac","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T16:31:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4f870a2-2a0f-49e7-8951-05d6ae761cac","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60004","PortSpecifier":{"PortValue":60004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60004","PortSpecifier":{"PortValue":60004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046726,"nanos":118009672},"http":{"id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/auth-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a33937d8-69c6-4305-8306-e1e69ca0f54d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58290","PortSpecifier":{"PortValue":58290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58290","PortSpecifier":{"PortValue":58290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046726,"nanos":171706827},"http":{"id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/auth-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e804e831-5e65-444f-9af9-a81eb58fcb4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60014","PortSpecifier":{"PortValue":60014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b83702f-e95e-479a-8f1c-1384b74fb301","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60014","PortSpecifier":{"PortValue":60014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046726,"nanos":222053057},"http":{"id":"7b83702f-e95e-479a-8f1c-1384b74fb301","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/auth-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b83702f-e95e-479a-8f1c-1384b74fb301","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58298","PortSpecifier":{"PortValue":58298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58298","PortSpecifier":{"PortValue":58298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046726,"nanos":289203790},"http":{"id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/auth-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d2b27a2-6827-4fd8-b595-1ea067b2a70a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52704","PortSpecifier":{"PortValue":52704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52704","PortSpecifier":{"PortValue":52704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046743,"nanos":852119647},"http":{"id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/auth-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe1f2690-d9b7-484f-962e-2faaf197e38f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51078","PortSpecifier":{"PortValue":51078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51078","PortSpecifier":{"PortValue":51078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046743,"nanos":887625636},"http":{"id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/auth-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3c09a32-9e25-4332-b844-4dda1ed91aa0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51092","PortSpecifier":{"PortValue":51092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","method":"GET","path":"/maas-api/v1/api-keys/10bf4fea-cb21-47c9-8d14-5f130a7583cb","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51092","PortSpecifier":{"PortValue":51092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046743,"nanos":923866617},"http":{"id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","method":"GET","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/10bf4fea-cb21-47c9-8d14-5f130a7583cb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/10bf4fea-cb21-47c9-8d14-5f130a7583cb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/auth-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aeed3a17-e41e-4885-85a8-d17fd26166fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52710","PortSpecifier":{"PortValue":52710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","method":"GET","path":"/maas-api/v1/api-keys/10bf4fea-cb21-47c9-8d14-5f130a7583cb","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52710","PortSpecifier":{"PortValue":52710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046743,"nanos":956423523},"http":{"id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","method":"GET","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/10bf4fea-cb21-47c9-8d14-5f130a7583cb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/10bf4fea-cb21-47c9-8d14-5f130a7583cb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/auth-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"059b594f-7db6-4ed7-9dcd-9b42f4bc11c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39878","PortSpecifier":{"PortValue":39878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39878","PortSpecifier":{"PortValue":39878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046763,"nanos":376173554},"http":{"id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/auth-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d9f7332-e486-4f90-858f-6dbbf01a4d2d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41968","PortSpecifier":{"PortValue":41968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41968","PortSpecifier":{"PortValue":41968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046763,"nanos":416266692},"http":{"id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/auth-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f3bbd9d-4dd2-4a80-a658-77800e70f013","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39890","PortSpecifier":{"PortValue":39890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bdebcbb-d74a-4831-9343-484fd7c12976","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39890","PortSpecifier":{"PortValue":39890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046763,"nanos":449774870},"http":{"id":"5bdebcbb-d74a-4831-9343-484fd7c12976","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Yu6snLT3nDksJy4z_xfpc6eR9ZHm0MTQVkcadxAgXlnZUvku9oXbDAtjvVZp"}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Yu6snLT3nDksJy4z_xfpc6eR9ZHm0MTQVkcadxAgXlnZUvku9oXbDAtjvVZp\"}"}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ff853535-7340-4ba9-b730-71fe91c14a3d","keyName":"e2e-auth-iso-a-6e7b51","subscription":"e2e-auth-iso-7d2363","tenant":"e2e-shared-a-21b35e","userId":"ff853535-7340-4ba9-b730-71fe91c14a3d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/auth-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-7d2363"}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bdebcbb-d74a-4831-9343-484fd7c12976","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce6e560113cb454fd4a6a6c94a8ca26173218155fe6d5e6ebdcb9c1c1672d6b6"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15359fe09527819b28b0e796b00339b097cf54d3bc8cd51e59b6f6b2542a1a3c"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b7e6eead350ce0f732d4c9889fd14940bbe4d57aa43e73236114d7d19304063"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf29394bce05829facc59db55a1cfd813e0073488c38cd443a19e03eca511bb3"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc2e1c33d5e92b9ae868b0b78d651560975ff40bf139dfa77fefca56ab5492fb"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c41dcf6814699569e8ce46a0027b2b3ac3f630409e6dc25da45cecf4ef3d4cf2"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80d00c08721f0c1241566e8bfbbe9174c98ae4b47bcba0017ca233a976f04dda"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95188940577706a5a4ae52e86d36066dc78eb218a906060c808912e053acfe7b"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89f6a3ae636b9a2497fe573f6c7d87dd082d44fc33f49da7952105259b15f623"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1cc6119d4c628778f19e31001d6e93157627054628c1c5fd6a69a7b7161a012"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f268d6050134a2e58a82b0e33d0dd31aa732ef2d7fc7fe1f476e6cfb33dd1dd"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62e1be6e4d7dfc5136b0a6fbbc9b9519123f6b83636f7932c38ed5a808a123eb"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2793b67267161c79800994b9b010d7a50ee0da48892ff669735eb570ca5dc9a3"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60da587d36e48778232ca070e07a1d883de5877b216e880a375f30ae29d178fc"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6befc0daabf7d654db96f244c949a9e4002b088e8c13d5138a8b6476bf19346"}
{"level":"info","ts":"2026-07-14T16:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c503b7dc5f81564ef808dd3d493b1ab5ad64b02e966d12df5217230f2551aa9"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902"}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902"}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902"}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c"}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902"}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde"}
{"level":"debug","ts":"2026-07-14T16:33:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde"}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57"}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57"}
{"level":"error","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3"}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3"}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3"}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78"}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78"}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78"}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78"}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78"}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78"}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78"}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798"}
{"level":"info","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798"}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551"}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53"}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551"}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53"}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551"}
{"level":"error","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53"}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551"}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"}
{"level":"debug","ts":"2026-07-14T16:33:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642"}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642"}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642"}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642"}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642"}
{"level":"info","ts":"2026-07-14T16:33:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66"}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798"}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513"}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57"}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c"}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde"}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642"}
{"level":"debug","ts":"2026-07-14T16:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78"}
{"level":"info","ts":"2026-07-14T16:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171"}
{"level":"info","ts":"2026-07-14T16:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5"}
{"level":"info","ts":"2026-07-14T16:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"}
{"level":"info","ts":"2026-07-14T16:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde"}
{"level":"info","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49126","PortSpecifier":{"PortValue":49126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49126","PortSpecifier":{"PortValue":49126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046835,"nanos":275944745},"http":{"id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/sub-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc4ed339-93b0-4edc-ab17-27d86e826d87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45172","PortSpecifier":{"PortValue":45172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45172","PortSpecifier":{"PortValue":45172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046835,"nanos":327169342},"http":{"id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/sub-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19d834d0-09e1-4fae-b329-9c4e5d3dc158","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49142","PortSpecifier":{"PortValue":49142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49142","PortSpecifier":{"PortValue":49142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046835,"nanos":366458203},"http":{"id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","method":"GET","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sWdKanzkfdjmLycf_68i5W8UbolrXLSJ3I55PyblAsIjwbqq3ZpeODXcNeXN"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sWdKanzkfdjmLycf_68i5W8UbolrXLSJ3I55PyblAsIjwbqq3ZpeODXcNeXN\"}"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9615de0c-9371-4633-a786-36e416ff5a0c","keyName":"e2e-sub-iso-236583","subscription":"e2e-a-only-aaf6f6","tenant":"e2e-shared-a-21b35e","userId":"9615de0c-9371-4633-a786-36e416ff5a0c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/sub-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-aaf6f6"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6d12274-a455-48c3-bb2b-2a42bdf78e64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45176","PortSpecifier":{"PortValue":45176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45176","PortSpecifier":{"PortValue":45176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046835,"nanos":408672969},"http":{"id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","method":"GET","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9lyRGoPCEq1v4caJ_vAa4rGvWHHTbTse3BXuwf9Nq5MLSd5o5aqO7YPeLEh4"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4e27c0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9lyRGoPCEq1v4caJ_vAa4rGvWHHTbTse3BXuwf9Nq5MLSd5o5aqO7YPeLEh4\"}"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4e27c0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"29302c97-9c3a-4729-a32f-23d533ffdc0e","keyName":"e2e-sub-iso-549a6a","subscription":"e2e-b-only-aaf6f6","tenant":"e2e-shared-b-4e27c0","userId":"29302c97-9c3a-4729-a32f-23d533ffdc0e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/sub-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-aaf6f6"}
{"level":"info","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b96f1fb-d57c-47e6-a4ea-e075c15af3fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59322","PortSpecifier":{"PortValue":59322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4528eea7-08ef-4600-b834-4fa661b55ffb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59322","PortSpecifier":{"PortValue":59322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046845,"nanos":806661200},"http":{"id":"4528eea7-08ef-4600-b834-4fa661b55ffb","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/sub-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4528eea7-08ef-4600-b834-4fa661b55ffb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36486","PortSpecifier":{"PortValue":36486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36486","PortSpecifier":{"PortValue":36486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046845,"nanos":843708691},"http":{"id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/sub-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f38eae2e-2658-437d-a9d8-d9bc10a1a620","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59332","PortSpecifier":{"PortValue":59332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59332","PortSpecifier":{"PortValue":59332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046845,"nanos":887087084},"http":{"id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dNpeL3reEUW8pjMm_wStpbVbYRtLz27Y1mg3CjXT4xNoABAN8K9p63H0nKof"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dNpeL3reEUW8pjMm_wStpbVbYRtLz27Y1mg3CjXT4xNoABAN8K9p63H0nKof\"}"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7407e046-c1e3-413d-bced-14dcd9eae2a5","keyName":"e2e-sub-iso-d9ba74","subscription":"e2e-shared-sub-127469","tenant":"e2e-shared-a-21b35e","userId":"7407e046-c1e3-413d-bced-14dcd9eae2a5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/sub-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-127469"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1013acb-3f98-4ef5-815b-f2d895878aa7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36490","PortSpecifier":{"PortValue":36490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa9b83cc-b471-43e5-9960-33e479f40468","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36490","PortSpecifier":{"PortValue":36490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046845,"nanos":923445685},"http":{"id":"fa9b83cc-b471-43e5-9960-33e479f40468","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZkwUyVNozbdem9cn_A1ySETMhVBt0yxEXl3fQ6c3Jm2QmqVKD5zodAEYhwEG"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4e27c0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZkwUyVNozbdem9cn_A1ySETMhVBt0yxEXl3fQ6c3Jm2QmqVKD5zodAEYhwEG\"}"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4e27c0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dc4a6e8c-a1fa-49e0-b55a-43bc654c4e49","keyName":"e2e-sub-iso-0cdd60","subscription":"e2e-shared-sub-127469","tenant":"e2e-shared-b-4e27c0","userId":"dc4a6e8c-a1fa-49e0-b55a-43bc654c4e49","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/sub-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-127469"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:34:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa9b83cc-b471-43e5-9960-33e479f40468","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a265e55f4b69a3635a309ea1420e9e005eb966c0bb97c63e446e03f19568d756"}
{"level":"info","ts":"2026-07-14T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd982503dba71151ab054c1451bffc024cc7d2edd5372c804af3cba6b612a902"}
{"level":"info","ts":"2026-07-14T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc3a8921c292823ed14c863676f4465dd69ea8ba5e6e3ea338e113fbec564ec3"}
{"level":"info","ts":"2026-07-14T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/566d9c702e4bfb478f218eba503fb5858891f24722269aa62ca650525e6acd57"}
{"level":"info","ts":"2026-07-14T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dd687ab4d6201c946e99fa4fb6fb890fe7db83692b1ee1aa8873085f7a8ff53"}
{"level":"info","ts":"2026-07-14T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5584ca5b901e13dbb2a5f6e3f2546480dc358c01502bdd50c8ee5cff8062b4c"}
{"level":"info","ts":"2026-07-14T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a4400842dc584b69db2a755d60ae9f379068661bf0ff1dcd7c9dd63e16a3f78"}
{"level":"info","ts":"2026-07-14T16:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d6544f6a2bcd5517565ddac557bd8c6d31127616a4b072814b9cc5a3f469798"}
{"level":"info","ts":"2026-07-14T16:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9068d84a73de3d3c8ca2a0fa2fa961b3b3501e3634534a6071fa0461b5b73bde"}
{"level":"info","ts":"2026-07-14T16:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdea00bb3d63c0bdb8104de5c5be4b85cf1a97a384e26ff0c4dd57ce1bf17642"}
{"level":"info","ts":"2026-07-14T16:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5116e446183ff16ef26483a99c9c3e5545398cb1b0602bbda077b76f73afc66"}
{"level":"info","ts":"2026-07-14T16:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/733c3e0386fb878e3d1f326a9c5c196a80a778e7b3f8428dc8857b4961fac171"}
{"level":"info","ts":"2026-07-14T16:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a30f327d5aca3fd82fa28acf2740d733668c7a20228a6b8467a627d0adfffde"}
{"level":"info","ts":"2026-07-14T16:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abb20d311a2970c282fa6ae9a544123b3e85a3c317a8badeabdef5950c2ecba1"}
{"level":"info","ts":"2026-07-14T16:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/389cfa2e7a1adc0b1b6d68a42fa6a0b8f120b9f54ac8d264d2cee72b2e4ca551"}
{"level":"info","ts":"2026-07-14T16:34:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb6c44478af2db61c7f3a58cddc16a5def22e6c46ee0d1f89814471cd26bf0bc"}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"error","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c"}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"error","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"error","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"704fbc221da1013c8267db700399815906b27720d4e9ff176a485fef91f6acff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c"}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"704fbc221da1013c8267db700399815906b27720d4e9ff176a485fef91f6acff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"704fbc221da1013c8267db700399815906b27720d4e9ff176a485fef91f6acff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/704fbc221da1013c8267db700399815906b27720d4e9ff176a485fef91f6acff"}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"704fbc221da1013c8267db700399815906b27720d4e9ff176a485fef91f6acff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["704fbc221da1013c8267db700399815906b27720d4e9ff176a485fef91f6acff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"704fbc221da1013c8267db700399815906b27720d4e9ff176a485fef91f6acff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"704fbc221da1013c8267db700399815906b27720d4e9ff176a485fef91f6acff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/704fbc221da1013c8267db700399815906b27720d4e9ff176a485fef91f6acff"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d"}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecef45d7d297dbb7b78caf41d1381abb69f1b5ca039355d1bf2f22541895cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecef45d7d297dbb7b78caf41d1381abb69f1b5ca039355d1bf2f22541895cd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecef45d7d297dbb7b78caf41d1381abb69f1b5ca039355d1bf2f22541895cd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecef45d7d297dbb7b78caf41d1381abb69f1b5ca039355d1bf2f22541895cd6"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecef45d7d297dbb7b78caf41d1381abb69f1b5ca039355d1bf2f22541895cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ecef45d7d297dbb7b78caf41d1381abb69f1b5ca039355d1bf2f22541895cd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecef45d7d297dbb7b78caf41d1381abb69f1b5ca039355d1bf2f22541895cd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecef45d7d297dbb7b78caf41d1381abb69f1b5ca039355d1bf2f22541895cd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d"}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecef45d7d297dbb7b78caf41d1381abb69f1b5ca039355d1bf2f22541895cd6"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512d2102b42ad69d7da2ce3a7d86b3ce373dd7cf7ab61fe1cca026f8ac8e85f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512d2102b42ad69d7da2ce3a7d86b3ce373dd7cf7ab61fe1cca026f8ac8e85f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512d2102b42ad69d7da2ce3a7d86b3ce373dd7cf7ab61fe1cca026f8ac8e85f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512d2102b42ad69d7da2ce3a7d86b3ce373dd7cf7ab61fe1cca026f8ac8e85f9"}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512d2102b42ad69d7da2ce3a7d86b3ce373dd7cf7ab61fe1cca026f8ac8e85f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:34:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512d2102b42ad69d7da2ce3a7d86b3ce373dd7cf7ab61fe1cca026f8ac8e85f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512d2102b42ad69d7da2ce3a7d86b3ce373dd7cf7ab61fe1cca026f8ac8e85f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512d2102b42ad69d7da2ce3a7d86b3ce373dd7cf7ab61fe1cca026f8ac8e85f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1"}
{"level":"info","ts":"2026-07-14T16:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512d2102b42ad69d7da2ce3a7d86b3ce373dd7cf7ab61fe1cca026f8ac8e85f9"}
{"level":"debug","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"debug","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"debug","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"debug","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"debug","ts":"2026-07-14T16:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2"}
{"level":"debug","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2"}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc"}
{"level":"info","ts":"2026-07-14T16:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"}
{"level":"debug","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"info","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"debug","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"debug","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"debug","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"debug","ts":"2026-07-14T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513"}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1"}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512d2102b42ad69d7da2ce3a7d86b3ce373dd7cf7ab61fe1cca026f8ac8e85f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512d2102b42ad69d7da2ce3a7d86b3ce373dd7cf7ab61fe1cca026f8ac8e85f9"}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecef45d7d297dbb7b78caf41d1381abb69f1b5ca039355d1bf2f22541895cd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed"}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081"}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecef45d7d297dbb7b78caf41d1381abb69f1b5ca039355d1bf2f22541895cd6"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"704fbc221da1013c8267db700399815906b27720d4e9ff176a485fef91f6acff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T16:35:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d"}
{"level":"debug","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"}
{"level":"debug","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/704fbc221da1013c8267db700399815906b27720d4e9ff176a485fef91f6acff"}
{"level":"info","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c"}
{"level":"info","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"}
{"level":"info","ts":"2026-07-14T16:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"}
{"level":"info","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42814","PortSpecifier":{"PortValue":42814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d05905d-a282-495f-bc3b-2a20b73eb857","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42814","PortSpecifier":{"PortValue":42814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046927,"nanos":306221447},"http":{"id":"1d05905d-a282-495f-bc3b-2a20b73eb857","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d05905d-a282-495f-bc3b-2a20b73eb857","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36062","PortSpecifier":{"PortValue":36062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36062","PortSpecifier":{"PortValue":36062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046927,"nanos":371947615},"http":{"id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/rate-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76c8ab30-ab74-4875-9ca6-d2f5c2e523e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42818","PortSpecifier":{"PortValue":42818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42818","PortSpecifier":{"PortValue":42818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046927,"nanos":429055370},"http":{"id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C8hKelp70JA5cAZG_grJzkXa8ABYGjumCWHna7s5KRxDbfWgjhQv4AOU5cmb"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C8hKelp70JA5cAZG_grJzkXa8ABYGjumCWHna7s5KRxDbfWgjhQv4AOU5cmb\"}"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e22abcb3-0971-4cfa-a609-61d1a68866ce","keyName":"e2e-rate-a-124c7b","subscription":"e2e-rate-iso-a-124c7b","tenant":"e2e-shared-a-21b35e","userId":"e22abcb3-0971-4cfa-a609-61d1a68866ce","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-124c7b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-124c7b","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-124c7b"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e22abcb3-0971-4cfa-a609-61d1a68866ce","keyName":"e2e-rate-a-124c7b","selected_subscription":"e2e-rate-iso-a-124c7b","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-124c7b@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-124c7b","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bcb9a43-4f95-446c-8f98-6a6b95b53347","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42834","PortSpecifier":{"PortValue":42834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42834","PortSpecifier":{"PortValue":42834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046928,"nanos":489561145},"http":{"id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C8hKelp70JA5cAZG_grJzkXa8ABYGjumCWHna7s5KRxDbfWgjhQv4AOU5cmb"}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C8hKelp70JA5cAZG_grJzkXa8ABYGjumCWHna7s5KRxDbfWgjhQv4AOU5cmb\"}"}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e22abcb3-0971-4cfa-a609-61d1a68866ce","keyName":"e2e-rate-a-124c7b","subscription":"e2e-rate-iso-a-124c7b","tenant":"e2e-shared-a-21b35e","userId":"e22abcb3-0971-4cfa-a609-61d1a68866ce","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-124c7b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-124c7b","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-124c7b"}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e22abcb3-0971-4cfa-a609-61d1a68866ce","keyName":"e2e-rate-a-124c7b","selected_subscription":"e2e-rate-iso-a-124c7b","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-124c7b@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-124c7b","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"827dad0c-ec8f-49de-b34a-d87a5ae4cadb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42844","PortSpecifier":{"PortValue":42844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42844","PortSpecifier":{"PortValue":42844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046929,"nanos":524131210},"http":{"id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C8hKelp70JA5cAZG_grJzkXa8ABYGjumCWHna7s5KRxDbfWgjhQv4AOU5cmb"}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C8hKelp70JA5cAZG_grJzkXa8ABYGjumCWHna7s5KRxDbfWgjhQv4AOU5cmb\"}"}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e22abcb3-0971-4cfa-a609-61d1a68866ce","keyName":"e2e-rate-a-124c7b","subscription":"e2e-rate-iso-a-124c7b","tenant":"e2e-shared-a-21b35e","userId":"e22abcb3-0971-4cfa-a609-61d1a68866ce","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-124c7b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-124c7b","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-124c7b"}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e22abcb3-0971-4cfa-a609-61d1a68866ce","keyName":"e2e-rate-a-124c7b","selected_subscription":"e2e-rate-iso-a-124c7b","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-124c7b@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-124c7b","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da65b005-c1fc-4a8a-b0ac-bedab32e1030","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26487e64-c922-4330-bc71-be987351a77d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44546","PortSpecifier":{"PortValue":44546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26487e64-c922-4330-bc71-be987351a77d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26487e64-c922-4330-bc71-be987351a77d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44546","PortSpecifier":{"PortValue":44546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046938,"nanos":368010545},"http":{"id":"26487e64-c922-4330-bc71-be987351a77d","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26487e64-c922-4330-bc71-be987351a77d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26487e64-c922-4330-bc71-be987351a77d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26487e64-c922-4330-bc71-be987351a77d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26487e64-c922-4330-bc71-be987351a77d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26487e64-c922-4330-bc71-be987351a77d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26487e64-c922-4330-bc71-be987351a77d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26487e64-c922-4330-bc71-be987351a77d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26487e64-c922-4330-bc71-be987351a77d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26487e64-c922-4330-bc71-be987351a77d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26487e64-c922-4330-bc71-be987351a77d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26487e64-c922-4330-bc71-be987351a77d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41978","PortSpecifier":{"PortValue":41978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41978","PortSpecifier":{"PortValue":41978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046938,"nanos":419718707},"http":{"id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"55df6c07-8799-43da-ba23-0e03e87461e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"]}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb990ca8d96"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=420231d1-e87f-4cdf-b198-cfee32f589f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"55df6c07-8799-43da-ba23-0e03e87461e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/rate-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d372ace8-af25-4de9-9ccf-58d3e6e0afbf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44550","PortSpecifier":{"PortValue":44550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44550","PortSpecifier":{"PortValue":44550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046938,"nanos":456104625},"http":{"id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2\"}"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","subscription":"e2e-rate-iso-a-b4f276","tenant":"e2e-shared-a-21b35e","userId":"332bbe34-94df-4566-b329-38f3cdd50ece","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-b4f276\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4f276"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","selected_subscription":"e2e-rate-iso-a-b4f276","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-b4f276@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03b4b715-fd05-411f-aa4a-34dc1f66fb86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44562","PortSpecifier":{"PortValue":44562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44562","PortSpecifier":{"PortValue":44562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046939,"nanos":493289881},"http":{"id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2"}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2\"}"}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","subscription":"e2e-rate-iso-a-b4f276","tenant":"e2e-shared-a-21b35e","userId":"332bbe34-94df-4566-b329-38f3cdd50ece","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-b4f276\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4f276"}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","selected_subscription":"e2e-rate-iso-a-b4f276","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-b4f276@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb984d44-a7f6-40be-bfc8-ee60c7ef172a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44570","PortSpecifier":{"PortValue":44570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2caa328-217b-4b49-a351-5f7efdc00081","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44570","PortSpecifier":{"PortValue":44570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046940,"nanos":525823335},"http":{"id":"a2caa328-217b-4b49-a351-5f7efdc00081","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2"}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2\"}"}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","subscription":"e2e-rate-iso-a-b4f276","tenant":"e2e-shared-a-21b35e","userId":"332bbe34-94df-4566-b329-38f3cdd50ece","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-b4f276\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4f276"}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","selected_subscription":"e2e-rate-iso-a-b4f276","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-b4f276@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2caa328-217b-4b49-a351-5f7efdc00081","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48810","PortSpecifier":{"PortValue":48810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bf07afe-c679-4244-9eae-25ddb879171b","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48810","PortSpecifier":{"PortValue":48810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046941,"nanos":562535362},"http":{"id":"0bf07afe-c679-4244-9eae-25ddb879171b","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2"}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2\"}"}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","subscription":"e2e-rate-iso-a-b4f276","tenant":"e2e-shared-a-21b35e","userId":"332bbe34-94df-4566-b329-38f3cdd50ece","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-b4f276\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4f276"}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","selected_subscription":"e2e-rate-iso-a-b4f276","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-b4f276@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bf07afe-c679-4244-9eae-25ddb879171b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48826","PortSpecifier":{"PortValue":48826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c24408e6-59b6-408b-877c-7b24b794e30e","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48826","PortSpecifier":{"PortValue":48826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046942,"nanos":597315339},"http":{"id":"c24408e6-59b6-408b-877c-7b24b794e30e","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2"}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2\"}"}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","subscription":"e2e-rate-iso-a-b4f276","tenant":"e2e-shared-a-21b35e","userId":"332bbe34-94df-4566-b329-38f3cdd50ece","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-b4f276\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4f276"}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","selected_subscription":"e2e-rate-iso-a-b4f276","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-b4f276@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c24408e6-59b6-408b-877c-7b24b794e30e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca5e9840-416e-4178-a0ea-64f382369375","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48836","PortSpecifier":{"PortValue":48836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca5e9840-416e-4178-a0ea-64f382369375","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca5e9840-416e-4178-a0ea-64f382369375","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48836","PortSpecifier":{"PortValue":48836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046943,"nanos":630905363},"http":{"id":"ca5e9840-416e-4178-a0ea-64f382369375","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2"}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2\"}"}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","subscription":"e2e-rate-iso-a-b4f276","tenant":"e2e-shared-a-21b35e","userId":"332bbe34-94df-4566-b329-38f3cdd50ece","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-b4f276\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca5e9840-416e-4178-a0ea-64f382369375","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4f276"}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca5e9840-416e-4178-a0ea-64f382369375","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","selected_subscription":"e2e-rate-iso-a-b4f276","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-b4f276@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca5e9840-416e-4178-a0ea-64f382369375","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca5e9840-416e-4178-a0ea-64f382369375","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48842","PortSpecifier":{"PortValue":48842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48842","PortSpecifier":{"PortValue":48842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046944,"nanos":669136811},"http":{"id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2"}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2\"}"}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","subscription":"e2e-rate-iso-a-b4f276","tenant":"e2e-shared-a-21b35e","userId":"332bbe34-94df-4566-b329-38f3cdd50ece","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-b4f276\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4f276"}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","selected_subscription":"e2e-rate-iso-a-b4f276","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-b4f276@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2545be2-3b8f-415a-9d6b-b333af5c5146","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48858","PortSpecifier":{"PortValue":48858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48858","PortSpecifier":{"PortValue":48858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046945,"nanos":703429275},"http":{"id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2"}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2\"}"}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","subscription":"e2e-rate-iso-a-b4f276","tenant":"e2e-shared-a-21b35e","userId":"332bbe34-94df-4566-b329-38f3cdd50ece","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-b4f276\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4f276"}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","selected_subscription":"e2e-rate-iso-a-b4f276","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-b4f276@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c468604e-f06f-4cb4-8b64-9e7b454dd442","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48864","PortSpecifier":{"PortValue":48864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48864","PortSpecifier":{"PortValue":48864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046946,"nanos":735937745},"http":{"id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2"}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2\"}"}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","subscription":"e2e-rate-iso-a-b4f276","tenant":"e2e-shared-a-21b35e","userId":"332bbe34-94df-4566-b329-38f3cdd50ece","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-b4f276\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4f276"}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","selected_subscription":"e2e-rate-iso-a-b4f276","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-b4f276@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ddca587-7e08-48cb-9ca4-8bb2aee21043","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48868","PortSpecifier":{"PortValue":48868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8813c948-3b2b-4e45-83e3-7660de92455c","method":"POST","path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions","host":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48868","PortSpecifier":{"PortValue":48868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046947,"nanos":768295818},"http":{"id":"8813c948-3b2b-4e45-83e3-7660de92455c","method":"POST","headers":{":authority":"e2e-shared-a-21b35e.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IUmWr46xdL4oAWgU_u3Rogx0Mu38V0GU8ymM096YqsxZcRvR7tiYF6dWiww2\"}"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","subscription":"e2e-rate-iso-a-b4f276","tenant":"e2e-shared-a-21b35e","userId":"332bbe34-94df-4566-b329-38f3cdd50ece","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\",\"requestedSubscription\":\"e2e-rate-iso-a-b4f276\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-21b35e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-21b35e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b4f276"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"332bbe34-94df-4566-b329-38f3cdd50ece","keyName":"e2e-rate-a-b4f276","selected_subscription":"e2e-rate-iso-a-b4f276","selected_subscription_key":"ai-tenant-e2e-shared-a-21b35e/e2e-rate-iso-a-b4f276@ai-tenant-e2e-shared-a-21b35e/rate-test-model-21b35e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-21b35e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b4f276","namespace":"ai-tenant-e2e-shared-a-21b35e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8813c948-3b2b-4e45-83e3-7660de92455c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43792","PortSpecifier":{"PortValue":43792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","method":"POST","path":"/ai-tenant-e2e-shared-b-4e27c0/rate-test-model-4e27c0/v1/completions","host":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43792","PortSpecifier":{"PortValue":43792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784046947,"nanos":802634864},"http":{"id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","method":"POST","headers":{":authority":"e2e-shared-b-4e27c0.apps.23394219-3f82-4987-bd29-5cb990ca8d96.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4e27c0/rate-test-model-4e27c0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11OocUZo7vw0wVFVy_7KSs8ZU41TlNyjvuMe1bY1aCtuS7RDg0mDWeMDRILxc"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4e27c0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11OocUZo7vw0wVFVy_7KSs8ZU41TlNyjvuMe1bY1aCtuS7RDg0mDWeMDRILxc\"}"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4e27c0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"18efbcdf-aac7-4fb4-bfb4-9ea82565aa3e","keyName":"e2e-rate-b-b4f276","subscription":"e2e-rate-iso-b-b4f276","tenant":"e2e-shared-b-4e27c0","userId":"18efbcdf-aac7-4fb4-bfb4-9ea82565aa3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4e27c0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-4e27c0/rate-test-model-4e27c0\",\"requestedSubscription\":\"e2e-rate-iso-b-b4f276\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4e27c0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4e27c0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b4f276","namespace":"ai-tenant-e2e-shared-b-4e27c0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4e27c0/rate-test-model-4e27c0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4e27c0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-b4f276"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"18efbcdf-aac7-4fb4-bfb4-9ea82565aa3e","keyName":"e2e-rate-b-b4f276","selected_subscription":"e2e-rate-iso-b-b4f276","selected_subscription_key":"ai-tenant-e2e-shared-b-4e27c0/e2e-rate-iso-b-b4f276@ai-tenant-e2e-shared-b-4e27c0/rate-test-model-4e27c0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4e27c0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b4f276","namespace":"ai-tenant-e2e-shared-b-4e27c0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T16:35:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75a933cf-b94b-4fb0-873e-9f82c3b35b6e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caad7fc34ed055bcff87cf9f423778b5c6fd8b074f873f13965eca3ed1874673"}
{"level":"info","ts":"2026-07-14T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4440abd4a5e426892f360491e1133f1ff16a09e708f2a29060f67a4aea9f386d"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7250753d3bf1c531bab5efc6434d4668d0871f4e9c3dbfa9beb3f43d86ed7941"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5b8ccf13b7d68518268d16c7cbb95cbbb86e6a3c675d19072fdc5243f6611ad"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/512d2102b42ad69d7da2ce3a7d86b3ce373dd7cf7ab61fe1cca026f8ac8e85f9"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/704fbc221da1013c8267db700399815906b27720d4e9ff176a485fef91f6acff"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aeae988fb573e2cddc8f44e9c33739aeec613d0f8385e2929d602112f35075c"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed77371440e88cf25b461c2cc3ecba43375678abeabc7cdf8f16e9e31daf95c2"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d586c3d2317ffac500dd0da0e4cee24d1cbe1fd7052d2fd9e2142e05de36c081"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0df498f33b8b51b5de9d86b93f5d4344825f85f9a95e8defe358eae9a8384b1"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/362ca95dce65d655846eff86fee2f93bae31285637141a9c5760f5247dbb4f3d"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ecef45d7d297dbb7b78caf41d1381abb69f1b5ca039355d1bf2f22541895cd6"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0964cebd9d743250276f3ed5d3b1c8cfb310c3f44b15d6ce8724210e4b0cfecc"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81de27726582e42c1d8d1e5c9277c145b9376e5783604d556307ec2237831970"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5946358740ba02805709a7de1e789e2b99465b3a4852325534ec4b5b4c18df15"}
{"level":"info","ts":"2026-07-14T16:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55339e135d6d6011493df8762b7e6a21d4cd4c8f152127ebd554afaeb1957f9e"}
{"level":"info","ts":"2026-07-14T16:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/927ec52a08f2a8a5818c1da2032e57d6a01d15bf6a540381909a53b2952d4513"}
{"level":"info","ts":"2026-07-14T16:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a34a6eff512811343c2cd17fb5d605aa54d9ea62ffad606cb4c42569e67a8aed"}
{"level":"info","ts":"2026-07-14T16:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a522c8d9c58f28b0caf8a13cbe173bf9745177a8a9bc9080c09bd31913f76b09"}
{"level":"info","ts":"2026-07-14T16:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11998325562a7e4bb841ab10fcfaaa19535043d6d0349cb10c014d288efcd33e"}
{"level":"info","ts":"2026-07-14T16:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b178259ec3f35b90aa3b1381015e03b6fc38f6e7d1c2985f0e1a0c99dbcd5a9f"}
{"level":"info","ts":"2026-07-14T16:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2aa3c3ebdfd27d1840d0c3c9b9f1ac9fc61ce6d2756f112e5e76bf3658fb0e1"}
{"level":"info","ts":"2026-07-14T16:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea6fe242fcf57afdb33be45fe906982da6c0b6e09c295a26258853be10a375e5"}
{"level":"info","ts":"2026-07-14T16:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2819ee2eb815ac444c14fde53eb20c398216a9e98c3d77ec02cae764ea340c87"}