--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-06T19:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf1fc3add7281c757264d3d279baf285988665d897f260d4348689e557c71f09"}
{"level":"info","ts":"2026-07-06T19:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/645c15cdec496b62d06f83d6c159d042129d821792b0493f3021bf91518d70a6"}
{"level":"info","ts":"2026-07-06T19:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bbec0ec3872c97ef9811d1a0ce9b7cdd526dcc86c55237991d40d6c04923f98"}
{"level":"info","ts":"2026-07-06T19:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b56053072618fe26c96bf0f09c7edc2fcc76558ff18fc21c31b6e7cbbb3edd3e"}
{"level":"info","ts":"2026-07-06T19:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bce24e2ca9394f78f87d18ca2e059c30062a383645c0eb74a7cc163d16f6000"}
{"level":"info","ts":"2026-07-06T19:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8caa75055d15dd819517540de82b74fb3b8d54f19d38ac9099f2aed850eb19e"}
{"level":"info","ts":"2026-07-06T19:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a20f29aa05bb09bf09055b8b2752499cc5c582b2b237349883d8ce8a7216735"}
{"level":"info","ts":"2026-07-06T19:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b360b8b221ae2ce09a89f4a48c41a830e1cdbaf1f98a466b695abaf10046cea"}
{"level":"info","ts":"2026-07-06T19:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66a495023e3c3eed3b7a94d86d969b9e83ec50a720954c7f8ef4ef4784ce6886"}
{"level":"debug","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f"}
{"level":"debug","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f"}
{"level":"debug","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f"}
{"level":"debug","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f"}
{"level":"debug","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f"}
{"level":"debug","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:55:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:55:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f"}
{"level":"debug","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f"}
{"level":"debug","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f"}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db"}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db"}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db"}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed"}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed"}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed"}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed"}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed"}
{"level":"info","ts":"2026-07-06T19:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/495ac513c901975e715a83f83d31992150f4477d84c9bfc291a782be06b8063f"}
{"level":"info","ts":"2026-07-06T19:56:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79ae0a36557f3543f3dc9de466889bcac936c0ba68aa3b7f07c713c411d29c2f"}
{"level":"info","ts":"2026-07-06T19:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb3dea8269ccb8c75ed38e2c5ca189e2cf9be9c9b9a4df806ef0696c371796ed"}
{"level":"info","ts":"2026-07-06T19:56:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d42e84fca5558c4bf9d15e5ce857a0c87eeb1535fe1791a2f01158745ec77db"}
{"level":"debug","ts":"2026-07-06T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa"}
{"level":"info","ts":"2026-07-06T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa"}
{"level":"error","ts":"2026-07-06T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa"}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa"}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73"}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73"}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"}
{"level":"error","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05"}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d389bab5d8802abf36dc7d655daa5e493b8dd7b783022e22aa2a1e2b7d10709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d389bab5d8802abf36dc7d655daa5e493b8dd7b783022e22aa2a1e2b7d10709","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d389bab5d8802abf36dc7d655daa5e493b8dd7b783022e22aa2a1e2b7d10709"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d389bab5d8802abf36dc7d655daa5e493b8dd7b783022e22aa2a1e2b7d10709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d389bab5d8802abf36dc7d655daa5e493b8dd7b783022e22aa2a1e2b7d10709"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d389bab5d8802abf36dc7d655daa5e493b8dd7b783022e22aa2a1e2b7d10709","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d389bab5d8802abf36dc7d655daa5e493b8dd7b783022e22aa2a1e2b7d10709","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d389bab5d8802abf36dc7d655daa5e493b8dd7b783022e22aa2a1e2b7d10709"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05"}
{"level":"error","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85"}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85"}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"}
{"level":"error","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"}
{"level":"debug","ts":"2026-07-06T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d904037a45dfa7273352f24f30c2187a9d0894c6cd006cee8a0527752aec5377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d904037a45dfa7273352f24f30c2187a9d0894c6cd006cee8a0527752aec5377"}
{"level":"info","ts":"2026-07-06T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d904037a45dfa7273352f24f30c2187a9d0894c6cd006cee8a0527752aec5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d904037a45dfa7273352f24f30c2187a9d0894c6cd006cee8a0527752aec5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d904037a45dfa7273352f24f30c2187a9d0894c6cd006cee8a0527752aec5377","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d904037a45dfa7273352f24f30c2187a9d0894c6cd006cee8a0527752aec5377"}
{"level":"debug","ts":"2026-07-06T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d904037a45dfa7273352f24f30c2187a9d0894c6cd006cee8a0527752aec5377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d904037a45dfa7273352f24f30c2187a9d0894c6cd006cee8a0527752aec5377"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d904037a45dfa7273352f24f30c2187a9d0894c6cd006cee8a0527752aec5377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d904037a45dfa7273352f24f30c2187a9d0894c6cd006cee8a0527752aec5377","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d904037a45dfa7273352f24f30c2187a9d0894c6cd006cee8a0527752aec5377"}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e"}
{"level":"error","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e"}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b"}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7017dee3c95e2a6d4a5304229bb158eba808e43c61a28b599d3cc8466f04df91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7017dee3c95e2a6d4a5304229bb158eba808e43c61a28b599d3cc8466f04df91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483224e1789824f54770a7802cad289cfb53ca4cebf82f4abeb200d758c5b783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483224e1789824f54770a7802cad289cfb53ca4cebf82f4abeb200d758c5b783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7017dee3c95e2a6d4a5304229bb158eba808e43c61a28b599d3cc8466f04df91"}
{"level":"info","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7017dee3c95e2a6d4a5304229bb158eba808e43c61a28b599d3cc8466f04df91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7017dee3c95e2a6d4a5304229bb158eba808e43c61a28b599d3cc8466f04df91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7017dee3c95e2a6d4a5304229bb158eba808e43c61a28b599d3cc8466f04df91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483224e1789824f54770a7802cad289cfb53ca4cebf82f4abeb200d758c5b783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483224e1789824f54770a7802cad289cfb53ca4cebf82f4abeb200d758c5b783"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483224e1789824f54770a7802cad289cfb53ca4cebf82f4abeb200d758c5b783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7017dee3c95e2a6d4a5304229bb158eba808e43c61a28b599d3cc8466f04df91"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7017dee3c95e2a6d4a5304229bb158eba808e43c61a28b599d3cc8466f04df91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483224e1789824f54770a7802cad289cfb53ca4cebf82f4abeb200d758c5b783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["483224e1789824f54770a7802cad289cfb53ca4cebf82f4abeb200d758c5b783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483224e1789824f54770a7802cad289cfb53ca4cebf82f4abeb200d758c5b783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483224e1789824f54770a7802cad289cfb53ca4cebf82f4abeb200d758c5b783"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483224e1789824f54770a7802cad289cfb53ca4cebf82f4abeb200d758c5b783"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483224e1789824f54770a7802cad289cfb53ca4cebf82f4abeb200d758c5b783","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e437af34-e7ef-49da-b90d-f00514623716","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34934","PortSpecifier":{"PortValue":34934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e437af34-e7ef-49da-b90d-f00514623716","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e437af34-e7ef-49da-b90d-f00514623716","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34934","PortSpecifier":{"PortValue":34934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367843,"nanos":842534794},"http":{"id":"e437af34-e7ef-49da-b90d-f00514623716","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e437af34-e7ef-49da-b90d-f00514623716","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e437af34-e7ef-49da-b90d-f00514623716","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e437af34-e7ef-49da-b90d-f00514623716","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e437af34-e7ef-49da-b90d-f00514623716","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e437af34-e7ef-49da-b90d-f00514623716","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e437af34-e7ef-49da-b90d-f00514623716","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/auth-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e437af34-e7ef-49da-b90d-f00514623716","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e437af34-e7ef-49da-b90d-f00514623716","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e437af34-e7ef-49da-b90d-f00514623716","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e437af34-e7ef-49da-b90d-f00514623716","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e437af34-e7ef-49da-b90d-f00514623716","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"670fc697-1302-41d1-984d-af0c20526cca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43010","PortSpecifier":{"PortValue":43010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"670fc697-1302-41d1-984d-af0c20526cca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"670fc697-1302-41d1-984d-af0c20526cca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43010","PortSpecifier":{"PortValue":43010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367843,"nanos":903947319},"http":{"id":"670fc697-1302-41d1-984d-af0c20526cca","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"670fc697-1302-41d1-984d-af0c20526cca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"670fc697-1302-41d1-984d-af0c20526cca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"670fc697-1302-41d1-984d-af0c20526cca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670fc697-1302-41d1-984d-af0c20526cca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670fc697-1302-41d1-984d-af0c20526cca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670fc697-1302-41d1-984d-af0c20526cca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/auth-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"670fc697-1302-41d1-984d-af0c20526cca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"670fc697-1302-41d1-984d-af0c20526cca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"670fc697-1302-41d1-984d-af0c20526cca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"670fc697-1302-41d1-984d-af0c20526cca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"670fc697-1302-41d1-984d-af0c20526cca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34938","PortSpecifier":{"PortValue":34938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86b079e8-f016-42eb-ab71-291608d8ac74","method":"GET","path":"/maas-api/v1/api-keys/386da22c-28b0-4ba8-a387-64918e72f41b","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34938","PortSpecifier":{"PortValue":34938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367843,"nanos":991171879},"http":{"id":"86b079e8-f016-42eb-ab71-291608d8ac74","method":"GET","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/386da22c-28b0-4ba8-a387-64918e72f41b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/386da22c-28b0-4ba8-a387-64918e72f41b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/auth-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86b079e8-f016-42eb-ab71-291608d8ac74","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43024","PortSpecifier":{"PortValue":43024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","method":"GET","path":"/maas-api/v1/api-keys/8c9c5a23-5ab0-4e3f-98ed-754d28e50c1d","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43024","PortSpecifier":{"PortValue":43024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367844,"nanos":38324213},"http":{"id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","method":"GET","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8c9c5a23-5ab0-4e3f-98ed-754d28e50c1d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8c9c5a23-5ab0-4e3f-98ed-754d28e50c1d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/auth-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:57:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49ebe00e-5eec-4c03-8a6a-a0d00757d79c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60726","PortSpecifier":{"PortValue":60726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60726","PortSpecifier":{"PortValue":60726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367866,"nanos":499892831},"http":{"id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/auth-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47cb1f79-3441-4b38-b4ff-a95f832c03c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60658","PortSpecifier":{"PortValue":60658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60658","PortSpecifier":{"PortValue":60658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367866,"nanos":538683315},"http":{"id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/auth-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9ba69f1-e8bc-445a-85c7-011f171361f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60740","PortSpecifier":{"PortValue":60740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60740","PortSpecifier":{"PortValue":60740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367866,"nanos":582023287},"http":{"id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","method":"GET","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HQ8zdnJ3TJCiUdP4_rS3vGreRxXX1L7xF2D71x6g4OLmVUihE3wrOw3g1po7"}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HQ8zdnJ3TJCiUdP4_rS3vGreRxXX1L7xF2D71x6g4OLmVUihE3wrOw3g1po7\"}"}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c683ca5b-2eae-4392-8471-22f7e1435ea7","keyName":"e2e-auth-iso-a-2310ec","subscription":"e2e-auth-iso-e9919d","tenant":"e2e-shared-a-9cb33a","userId":"c683ca5b-2eae-4392-8471-22f7e1435ea7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/auth-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e9919d"}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:57:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3be20a0-d46f-45f7-83f6-b7752849f3cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55258","PortSpecifier":{"PortValue":55258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55258","PortSpecifier":{"PortValue":55258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367883,"nanos":849583623},"http":{"id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/auth-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33d8d7e5-698a-4140-b055-dd8c3712a0cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60944","PortSpecifier":{"PortValue":60944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60944","PortSpecifier":{"PortValue":60944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367883,"nanos":885138369},"http":{"id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/auth-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e77c3b1-9b8c-438e-bfdb-386c33904ae2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d3d802a-f3b2-457b-a84e-f131364395bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60946","PortSpecifier":{"PortValue":60946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d3d802a-f3b2-457b-a84e-f131364395bb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d3d802a-f3b2-457b-a84e-f131364395bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60946","PortSpecifier":{"PortValue":60946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367883,"nanos":924201680},"http":{"id":"3d3d802a-f3b2-457b-a84e-f131364395bb","method":"GET","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d3d802a-f3b2-457b-a84e-f131364395bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kaa3QVkJZa6DC6Wh_QZnIXoftKoEfYaV7Cy3LEKJjoR7Mic9JvFas8LthrFf"}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d3d802a-f3b2-457b-a84e-f131364395bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-97cecc.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kaa3QVkJZa6DC6Wh_QZnIXoftKoEfYaV7Cy3LEKJjoR7Mic9JvFas8LthrFf\"}"}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d3d802a-f3b2-457b-a84e-f131364395bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-97cecc.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d3d802a-f3b2-457b-a84e-f131364395bb","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"3d3d802a-f3b2-457b-a84e-f131364395bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d3d802a-f3b2-457b-a84e-f131364395bb","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T19:58:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d3d802a-f3b2-457b-a84e-f131364395bb","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43036","PortSpecifier":{"PortValue":43036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f83e489d-1419-4a75-aee6-73dfe90075b2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43036","PortSpecifier":{"PortValue":43036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367901,"nanos":69101125},"http":{"id":"f83e489d-1419-4a75-aee6-73dfe90075b2","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/auth-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f83e489d-1419-4a75-aee6-73dfe90075b2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51072","PortSpecifier":{"PortValue":51072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51072","PortSpecifier":{"PortValue":51072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367901,"nanos":104035256},"http":{"id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/auth-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1b83e5a-43bc-4bb7-9edf-3d10143598c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43044","PortSpecifier":{"PortValue":43044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43044","PortSpecifier":{"PortValue":43044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367901,"nanos":147019221},"http":{"id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/auth-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"065a1c4c-3d96-45a8-ab1b-85ad6249088a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"def86760-4eed-451d-a5e5-97fd08328207","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51088","PortSpecifier":{"PortValue":51088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"def86760-4eed-451d-a5e5-97fd08328207","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"def86760-4eed-451d-a5e5-97fd08328207","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51088","PortSpecifier":{"PortValue":51088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367901,"nanos":184246383},"http":{"id":"def86760-4eed-451d-a5e5-97fd08328207","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"def86760-4eed-451d-a5e5-97fd08328207","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"def86760-4eed-451d-a5e5-97fd08328207","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"def86760-4eed-451d-a5e5-97fd08328207","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def86760-4eed-451d-a5e5-97fd08328207","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def86760-4eed-451d-a5e5-97fd08328207","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def86760-4eed-451d-a5e5-97fd08328207","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/auth-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"def86760-4eed-451d-a5e5-97fd08328207","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def86760-4eed-451d-a5e5-97fd08328207","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def86760-4eed-451d-a5e5-97fd08328207","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"def86760-4eed-451d-a5e5-97fd08328207","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"def86760-4eed-451d-a5e5-97fd08328207","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39c473c9-6808-4699-984b-cf5dd219b131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40578","PortSpecifier":{"PortValue":40578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39c473c9-6808-4699-984b-cf5dd219b131","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39c473c9-6808-4699-984b-cf5dd219b131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40578","PortSpecifier":{"PortValue":40578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367918,"nanos":271424470},"http":{"id":"39c473c9-6808-4699-984b-cf5dd219b131","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39c473c9-6808-4699-984b-cf5dd219b131","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39c473c9-6808-4699-984b-cf5dd219b131","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39c473c9-6808-4699-984b-cf5dd219b131","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39c473c9-6808-4699-984b-cf5dd219b131","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39c473c9-6808-4699-984b-cf5dd219b131","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39c473c9-6808-4699-984b-cf5dd219b131","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/auth-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39c473c9-6808-4699-984b-cf5dd219b131","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39c473c9-6808-4699-984b-cf5dd219b131","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39c473c9-6808-4699-984b-cf5dd219b131","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39c473c9-6808-4699-984b-cf5dd219b131","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39c473c9-6808-4699-984b-cf5dd219b131","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42742","PortSpecifier":{"PortValue":42742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42742","PortSpecifier":{"PortValue":42742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367918,"nanos":304756564},"http":{"id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/auth-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d10f589f-8c44-40fc-bcfa-49e2fab99b87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42752","PortSpecifier":{"PortValue":42752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e555976-4457-46e8-b764-13a8a4244fe7","method":"GET","path":"/maas-api/v1/api-keys/4ed99a96-b39b-440f-a6d2-837dc19c887e","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42752","PortSpecifier":{"PortValue":42752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367918,"nanos":345042606},"http":{"id":"5e555976-4457-46e8-b764-13a8a4244fe7","method":"GET","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ed99a96-b39b-440f-a6d2-837dc19c887e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ed99a96-b39b-440f-a6d2-837dc19c887e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/auth-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e555976-4457-46e8-b764-13a8a4244fe7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40586","PortSpecifier":{"PortValue":40586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e286e8a4-016c-4012-97ec-fa32469d63e9","method":"GET","path":"/maas-api/v1/api-keys/4ed99a96-b39b-440f-a6d2-837dc19c887e","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40586","PortSpecifier":{"PortValue":40586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367918,"nanos":379981977},"http":{"id":"e286e8a4-016c-4012-97ec-fa32469d63e9","method":"GET","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ed99a96-b39b-440f-a6d2-837dc19c887e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ed99a96-b39b-440f-a6d2-837dc19c887e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/auth-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e286e8a4-016c-4012-97ec-fa32469d63e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e606a075-86d5-4033-8900-d873af91b533","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50224","PortSpecifier":{"PortValue":50224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e606a075-86d5-4033-8900-d873af91b533","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e606a075-86d5-4033-8900-d873af91b533","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50224","PortSpecifier":{"PortValue":50224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367935,"nanos":515629666},"http":{"id":"e606a075-86d5-4033-8900-d873af91b533","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e606a075-86d5-4033-8900-d873af91b533","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e606a075-86d5-4033-8900-d873af91b533","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e606a075-86d5-4033-8900-d873af91b533","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e606a075-86d5-4033-8900-d873af91b533","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e606a075-86d5-4033-8900-d873af91b533","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e606a075-86d5-4033-8900-d873af91b533","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/auth-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e606a075-86d5-4033-8900-d873af91b533","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e606a075-86d5-4033-8900-d873af91b533","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e606a075-86d5-4033-8900-d873af91b533","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e606a075-86d5-4033-8900-d873af91b533","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e606a075-86d5-4033-8900-d873af91b533","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33140","PortSpecifier":{"PortValue":33140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"014ec491-8ed3-401b-9243-46e81b255ecf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33140","PortSpecifier":{"PortValue":33140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367935,"nanos":553502841},"http":{"id":"014ec491-8ed3-401b-9243-46e81b255ecf","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/auth-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"014ec491-8ed3-401b-9243-46e81b255ecf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50228","PortSpecifier":{"PortValue":50228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d838e091-9658-4c01-a960-ed63a30ebb93","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50228","PortSpecifier":{"PortValue":50228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367935,"nanos":591691581},"http":{"id":"d838e091-9658-4c01-a960-ed63a30ebb93","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5oJBC6SH1tL9iaBn_tFxRYCcIbaKOhy38ZAuFJjvSfCZGZHQKzPdXD7heLGa"}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5oJBC6SH1tL9iaBn_tFxRYCcIbaKOhy38ZAuFJjvSfCZGZHQKzPdXD7heLGa\"}"}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"667aa2de-30d4-448c-84a2-4249127450b3","keyName":"e2e-auth-iso-a-254151","subscription":"e2e-auth-iso-39e037","tenant":"e2e-shared-a-9cb33a","userId":"667aa2de-30d4-448c-84a2-4249127450b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/auth-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-39e037"}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d838e091-9658-4c01-a960-ed63a30ebb93","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dd3e8b1344ebfa73c90befb1a6853f1a6843ab6daf1f72f974866b9a5463cbe"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d904037a45dfa7273352f24f30c2187a9d0894c6cd006cee8a0527752aec5377"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7a8a6cba5394a8b6afa1fad4f25a75e70b65af6ece08a548c59c07de8e2403e"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bc6de24a2d5b445d1770999b727e924011bf2d9b250773d340547969a2a6c85"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e89e6857e9f3d2965c6635808bdb78c80dd575dc63db308685f84c80d562862e"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed1104fadf6aeb13b2e48f64d54493caeef1aa570c224ae89c45ea8520f64166"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5f43d1314c28ee3227a5d55c2b40896255bf1f11d655c4884c3650211f4dbfa"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0eac5f4861cc8455d655ab7513893e0dacc08b291d0d8d18b65cb02354e38247"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7017dee3c95e2a6d4a5304229bb158eba808e43c61a28b599d3cc8466f04df91"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e771e85fe9838e670fb110f6eb010b61fa6aa9ab4abf34113ed3f4c819fd7c05"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcee49036fdef75bea1d0dad1c902b42337060c9b8b2001f89ffbc1c45be1361"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/035e4503f0d1b3690e2c54f867e5f0e675ad4e3dcebc9c25d87bbb6de8736c73"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/483224e1789824f54770a7802cad289cfb53ca4cebf82f4abeb200d758c5b783"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d389bab5d8802abf36dc7d655daa5e493b8dd7b783022e22aa2a1e2b7d10709"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd9a70affea0e626c154fbbd239b33760bbcd2c89b67d6aab8cdc25cbf71ebf0"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b3ca180212ce1b0ffb42f85c398bc6321b6853ed70fff85469a612f690f3473"}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8"}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8"}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8"}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8"}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8"}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5"}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5"}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b4b41fc5cb6c94f7c419591b1735ecf8b68d1a5f83515bf131070155ed35d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b4b41fc5cb6c94f7c419591b1735ecf8b68d1a5f83515bf131070155ed35d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b4b41fc5cb6c94f7c419591b1735ecf8b68d1a5f83515bf131070155ed35d"}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"390b4b41fc5cb6c94f7c419591b1735ecf8b68d1a5f83515bf131070155ed35d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["390b4b41fc5cb6c94f7c419591b1735ecf8b68d1a5f83515bf131070155ed35d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a"}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"390b4b41fc5cb6c94f7c419591b1735ecf8b68d1a5f83515bf131070155ed35d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b4b41fc5cb6c94f7c419591b1735ecf8b68d1a5f83515bf131070155ed35d"}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390b4b41fc5cb6c94f7c419591b1735ecf8b68d1a5f83515bf131070155ed35d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a"}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b4b41fc5cb6c94f7c419591b1735ecf8b68d1a5f83515bf131070155ed35d"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e"}
{"level":"error","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0"}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0"}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e"}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0"}
{"level":"error","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"}
{"level":"error","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412"}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412"}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412"}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412"}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412"}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412"}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412"}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"}
{"level":"error","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"564cc05844e2b4f15069f23975cb409576109e42f4002f0eccec8fd68736b056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"564cc05844e2b4f15069f23975cb409576109e42f4002f0eccec8fd68736b056","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"564cc05844e2b4f15069f23975cb409576109e42f4002f0eccec8fd68736b056","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/564cc05844e2b4f15069f23975cb409576109e42f4002f0eccec8fd68736b056"}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"564cc05844e2b4f15069f23975cb409576109e42f4002f0eccec8fd68736b056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["564cc05844e2b4f15069f23975cb409576109e42f4002f0eccec8fd68736b056"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"564cc05844e2b4f15069f23975cb409576109e42f4002f0eccec8fd68736b056","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"564cc05844e2b4f15069f23975cb409576109e42f4002f0eccec8fd68736b056","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/564cc05844e2b4f15069f23975cb409576109e42f4002f0eccec8fd68736b056"}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b"}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b"}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b"}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b"}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80"}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211"}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80"}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbfd2a93cf4bf41e760265e6eb1d3965be0ecfd6ecb8cbddd5bbbf94747d12eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbfd2a93cf4bf41e760265e6eb1d3965be0ecfd6ecb8cbddd5bbbf94747d12eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b"}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbfd2a93cf4bf41e760265e6eb1d3965be0ecfd6ecb8cbddd5bbbf94747d12eb"}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbfd2a93cf4bf41e760265e6eb1d3965be0ecfd6ecb8cbddd5bbbf94747d12eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbfd2a93cf4bf41e760265e6eb1d3965be0ecfd6ecb8cbddd5bbbf94747d12eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211"}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbfd2a93cf4bf41e760265e6eb1d3965be0ecfd6ecb8cbddd5bbbf94747d12eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbfd2a93cf4bf41e760265e6eb1d3965be0ecfd6ecb8cbddd5bbbf94747d12eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80"}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:59:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbfd2a93cf4bf41e760265e6eb1d3965be0ecfd6ecb8cbddd5bbbf94747d12eb"}
{"level":"info","ts":"2026-07-06T19:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80"}
{"level":"debug","ts":"2026-07-06T20:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b"}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"390b4b41fc5cb6c94f7c419591b1735ecf8b68d1a5f83515bf131070155ed35d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/390b4b41fc5cb6c94f7c419591b1735ecf8b68d1a5f83515bf131070155ed35d"}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"564cc05844e2b4f15069f23975cb409576109e42f4002f0eccec8fd68736b056","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"error","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/564cc05844e2b4f15069f23975cb409576109e42f4002f0eccec8fd68736b056"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5"}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a"}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbfd2a93cf4bf41e760265e6eb1d3965be0ecfd6ecb8cbddd5bbbf94747d12eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbfd2a93cf4bf41e760265e6eb1d3965be0ecfd6ecb8cbddd5bbbf94747d12eb"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791"}
{"level":"debug","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"}
{"level":"info","ts":"2026-07-06T20:00:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"}
{"level":"info","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39002","PortSpecifier":{"PortValue":39002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39002","PortSpecifier":{"PortValue":39002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368013,"nanos":594991968},"http":{"id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/sub-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66dddd54-60c3-434f-9e3b-7aea9693aa05","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48412","PortSpecifier":{"PortValue":48412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48412","PortSpecifier":{"PortValue":48412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368013,"nanos":636681751},"http":{"id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/sub-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ff0bd68-4391-4a9b-8ad3-a8c4764596e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39010","PortSpecifier":{"PortValue":39010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39010","PortSpecifier":{"PortValue":39010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368013,"nanos":676688724},"http":{"id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","method":"GET","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OSfPAjWcaq6w4ta3_K3XsmDef4MwIxXFgG8JEQHm273SmLKxNvRM1XwwK9LI"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OSfPAjWcaq6w4ta3_K3XsmDef4MwIxXFgG8JEQHm273SmLKxNvRM1XwwK9LI\"}"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92b35ba3-e927-44c6-9015-325ef85c3399","keyName":"e2e-sub-iso-57bb1f","subscription":"e2e-a-only-f0f45c","tenant":"e2e-shared-a-9cb33a","userId":"92b35ba3-e927-44c6-9015-325ef85c3399","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/sub-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-f0f45c"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a255bc4-26f3-4c0e-80e0-6a7b07b5a586","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48414","PortSpecifier":{"PortValue":48414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cfd2c91-332d-459c-abdc-2c6d40447863","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48414","PortSpecifier":{"PortValue":48414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368013,"nanos":716487272},"http":{"id":"5cfd2c91-332d-459c-abdc-2c6d40447863","method":"GET","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Zo8PnXiEFGEDSi60_Vo9pvuPWUmEZ2bJsC62g5PjJEjgOj01XRlB4J4M1Nes"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-97cecc.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Zo8PnXiEFGEDSi60_Vo9pvuPWUmEZ2bJsC62g5PjJEjgOj01XRlB4J4M1Nes\"}"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-97cecc.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a4caee5e-0aa6-4ce3-8f62-4e98275b5e51","keyName":"e2e-sub-iso-10f0db","subscription":"e2e-b-only-f0f45c","tenant":"e2e-shared-b-97cecc","userId":"a4caee5e-0aa6-4ce3-8f62-4e98275b5e51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/sub-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-f0f45c"}
{"level":"info","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:00:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cfd2c91-332d-459c-abdc-2c6d40447863","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48637bee-d234-496b-b8aa-018976d7f652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33986","PortSpecifier":{"PortValue":33986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48637bee-d234-496b-b8aa-018976d7f652","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48637bee-d234-496b-b8aa-018976d7f652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33986","PortSpecifier":{"PortValue":33986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368025,"nanos":845621989},"http":{"id":"48637bee-d234-496b-b8aa-018976d7f652","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48637bee-d234-496b-b8aa-018976d7f652","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48637bee-d234-496b-b8aa-018976d7f652","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48637bee-d234-496b-b8aa-018976d7f652","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48637bee-d234-496b-b8aa-018976d7f652","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48637bee-d234-496b-b8aa-018976d7f652","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48637bee-d234-496b-b8aa-018976d7f652","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/sub-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48637bee-d234-496b-b8aa-018976d7f652","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48637bee-d234-496b-b8aa-018976d7f652","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48637bee-d234-496b-b8aa-018976d7f652","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48637bee-d234-496b-b8aa-018976d7f652","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48637bee-d234-496b-b8aa-018976d7f652","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53278","PortSpecifier":{"PortValue":53278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53278","PortSpecifier":{"PortValue":53278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368025,"nanos":882486454},"http":{"id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/sub-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9f6f6a6-58fe-465a-95bc-cf1fa4aaa06a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"896391a7-131f-44c6-8a55-007ef23112b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34000","PortSpecifier":{"PortValue":34000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"896391a7-131f-44c6-8a55-007ef23112b9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"896391a7-131f-44c6-8a55-007ef23112b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34000","PortSpecifier":{"PortValue":34000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368025,"nanos":923856198},"http":{"id":"896391a7-131f-44c6-8a55-007ef23112b9","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"896391a7-131f-44c6-8a55-007ef23112b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fW2jFoPlyqn25vhE_JNxb6ZRSXkHZGK1Fm9Lp01hbK1NyNxhsLbPAK0ij44C"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"896391a7-131f-44c6-8a55-007ef23112b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fW2jFoPlyqn25vhE_JNxb6ZRSXkHZGK1Fm9Lp01hbK1NyNxhsLbPAK0ij44C\"}"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"896391a7-131f-44c6-8a55-007ef23112b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"65a2b0be-18ae-45d9-b306-8f90d4dced97","keyName":"e2e-sub-iso-3f5727","subscription":"e2e-shared-sub-437a31","tenant":"e2e-shared-a-9cb33a","userId":"65a2b0be-18ae-45d9-b306-8f90d4dced97","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"896391a7-131f-44c6-8a55-007ef23112b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"896391a7-131f-44c6-8a55-007ef23112b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"896391a7-131f-44c6-8a55-007ef23112b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"896391a7-131f-44c6-8a55-007ef23112b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/sub-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"896391a7-131f-44c6-8a55-007ef23112b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"896391a7-131f-44c6-8a55-007ef23112b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"896391a7-131f-44c6-8a55-007ef23112b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-437a31"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"896391a7-131f-44c6-8a55-007ef23112b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"896391a7-131f-44c6-8a55-007ef23112b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"896391a7-131f-44c6-8a55-007ef23112b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53294","PortSpecifier":{"PortValue":53294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53294","PortSpecifier":{"PortValue":53294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368025,"nanos":955687022},"http":{"id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-K2dRaqUvJw03w4BP_8RZuHio8vMYlpmoEz5ENGSYOp7gt2hekSufyLvv9o5i"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-97cecc.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-K2dRaqUvJw03w4BP_8RZuHio8vMYlpmoEz5ENGSYOp7gt2hekSufyLvv9o5i\"}"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-97cecc.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6c4bdb0a-be0c-43b5-be99-f6fb69b8095d","keyName":"e2e-sub-iso-1fc4ca","subscription":"e2e-shared-sub-437a31","tenant":"e2e-shared-b-97cecc","userId":"6c4bdb0a-be0c-43b5-be99-f6fb69b8095d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/sub-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-437a31"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48822a2b-608d-9bfa-9cec-419d773ff7f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7a9955c0d9193228447834ba2149051bf437d9fbdc3ed8d753791e627020fa8"}
{"level":"info","ts":"2026-07-06T20:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ce45dd8b2a5df51473ccb29cd92b10862ec4730b405adbef2e456e3e34b4211"}
{"level":"info","ts":"2026-07-06T20:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f523820f66692d69219aabac0212772b600d45393edf1c695ed9779eb0850c0"}
{"level":"info","ts":"2026-07-06T20:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb21b87a016b85344e159c03a76bf0fbf4dac76943ec7a7640fd343a37921791"}
{"level":"info","ts":"2026-07-06T20:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fb71a290408079ea2d8d59cdbbaf8b27b72314ead10f80e52ff6640376c491e"}
{"level":"info","ts":"2026-07-06T20:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1513b6272dd863a7cdc8e476b2b441cae53bfdf76aad651b436416fe4c2e03b"}
{"level":"info","ts":"2026-07-06T20:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96b1ee87f86c2ae0f165e9d7bf69b0fe144edd53bea72002c6a661d66bbc320e"}
{"level":"info","ts":"2026-07-06T20:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c662ec92e9d67da6a219b66aa060bf978eb9db1c369012b423f736c531775d80"}
{"level":"info","ts":"2026-07-06T20:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/564cc05844e2b4f15069f23975cb409576109e42f4002f0eccec8fd68736b056"}
{"level":"info","ts":"2026-07-06T20:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2245c19a3d6dcfc384fc51be453db4c065735733ac6fe4a51dc555aba50b9082"}
{"level":"info","ts":"2026-07-06T20:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e515f44eca2f4cd2d23c6e9178e10bc6cf0a2bf2593ccd0a72f689fed7de63c5"}
{"level":"info","ts":"2026-07-06T20:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92993e7fe2821beb89106a51caf70474185dbaa1c36e52cc8bcc7cd1c1c500ee"}
{"level":"info","ts":"2026-07-06T20:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbfd2a93cf4bf41e760265e6eb1d3965be0ecfd6ecb8cbddd5bbbf94747d12eb"}
{"level":"info","ts":"2026-07-06T20:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/390b4b41fc5cb6c94f7c419591b1735ecf8b68d1a5f83515bf131070155ed35d"}
{"level":"info","ts":"2026-07-06T20:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/998cd11b347e2da28caa8e6b98a0b935ff6254faf0a209cc687680d1798eb09a"}
{"level":"info","ts":"2026-07-06T20:00:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/260895d276768d9a59031e2ba84cda268faba79aac4c39c3f72671cb6b831412"}
{"level":"debug","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa"}
{"level":"debug","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa"}
{"level":"debug","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa"}
{"level":"debug","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa"}
{"level":"debug","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa"}
{"level":"debug","ts":"2026-07-06T20:00:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87"}
{"level":"error","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152"}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152"}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584"}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584"}
{"level":"error","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584"}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5"}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9a0a5c755219ce9f574b38e3cf1d011cb744f74e666d6f27a1201f31438c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9a0a5c755219ce9f574b38e3cf1d011cb744f74e666d6f27a1201f31438c12"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9a0a5c755219ce9f574b38e3cf1d011cb744f74e666d6f27a1201f31438c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d46867a0435b3e21b519b6cfd6432c0541101cdf6eb19b4d75a15afa0d7521"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d46867a0435b3e21b519b6cfd6432c0541101cdf6eb19b4d75a15afa0d7521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8d46867a0435b3e21b519b6cfd6432c0541101cdf6eb19b4d75a15afa0d7521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d46867a0435b3e21b519b6cfd6432c0541101cdf6eb19b4d75a15afa0d7521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9a0a5c755219ce9f574b38e3cf1d011cb744f74e666d6f27a1201f31438c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a9a0a5c755219ce9f574b38e3cf1d011cb744f74e666d6f27a1201f31438c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9a0a5c755219ce9f574b38e3cf1d011cb744f74e666d6f27a1201f31438c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8d46867a0435b3e21b519b6cfd6432c0541101cdf6eb19b4d75a15afa0d7521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9a0a5c755219ce9f574b38e3cf1d011cb744f74e666d6f27a1201f31438c12"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9a0a5c755219ce9f574b38e3cf1d011cb744f74e666d6f27a1201f31438c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d46867a0435b3e21b519b6cfd6432c0541101cdf6eb19b4d75a15afa0d7521"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9a0a5c755219ce9f574b38e3cf1d011cb744f74e666d6f27a1201f31438c12"}
{"level":"info","ts":"2026-07-06T20:00:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4"}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4"}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4"}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"}
{"level":"info","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4"}
{"level":"error","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"}
{"level":"debug","ts":"2026-07-06T20:01:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703"}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa"}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831"}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152"}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b"}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63"}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63"}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8d46867a0435b3e21b519b6cfd6432c0541101cdf6eb19b4d75a15afa0d7521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63"}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87"}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d46867a0435b3e21b519b6cfd6432c0541101cdf6eb19b4d75a15afa0d7521"}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4"}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584"}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e"}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4"}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c"}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9a0a5c755219ce9f574b38e3cf1d011cb744f74e666d6f27a1201f31438c12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5"}
{"level":"info","ts":"2026-07-06T20:01:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9a0a5c755219ce9f574b38e3cf1d011cb744f74e666d6f27a1201f31438c12"}
{"level":"info","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39996","PortSpecifier":{"PortValue":39996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39996","PortSpecifier":{"PortValue":39996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368104,"nanos":561897154},"http":{"id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2702904f-eabe-4f7e-b6c5-aeebfe3f8ae7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32770","PortSpecifier":{"PortValue":32770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20108e08-307f-4a7e-bd85-ee3583843cb0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32770","PortSpecifier":{"PortValue":32770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368104,"nanos":631380581},"http":{"id":"20108e08-307f-4a7e-bd85-ee3583843cb0","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/rate-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20108e08-307f-4a7e-bd85-ee3583843cb0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40000","PortSpecifier":{"PortValue":40000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","method":"POST","path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40000","PortSpecifier":{"PortValue":40000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368104,"nanos":675328013},"http":{"id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-q07KSE44g7ekvAHU_1cfDH8Lh6efOXsv3SqZcto1z2r1mCahT22K01nrMMbD"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-q07KSE44g7ekvAHU_1cfDH8Lh6efOXsv3SqZcto1z2r1mCahT22K01nrMMbD\"}"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"65987a6a-17e7-4633-a688-9620fe7d712e","keyName":"e2e-rate-a-2b0f51","subscription":"e2e-rate-iso-a-2b0f51","tenant":"e2e-shared-a-9cb33a","userId":"65987a6a-17e7-4633-a688-9620fe7d712e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\",\"requestedSubscription\":\"e2e-rate-iso-a-2b0f51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2b0f51","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2b0f51"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"65987a6a-17e7-4633-a688-9620fe7d712e","keyName":"e2e-rate-a-2b0f51","selected_subscription":"e2e-rate-iso-a-2b0f51","selected_subscription_key":"ai-tenant-e2e-shared-a-9cb33a/e2e-rate-iso-a-2b0f51@ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2b0f51","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6c55f4b-522b-486f-8528-aa45fdfe03c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40006","PortSpecifier":{"PortValue":40006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","method":"POST","path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40006","PortSpecifier":{"PortValue":40006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368105,"nanos":741900794},"http":{"id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-q07KSE44g7ekvAHU_1cfDH8Lh6efOXsv3SqZcto1z2r1mCahT22K01nrMMbD"}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-q07KSE44g7ekvAHU_1cfDH8Lh6efOXsv3SqZcto1z2r1mCahT22K01nrMMbD\"}"}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"65987a6a-17e7-4633-a688-9620fe7d712e","keyName":"e2e-rate-a-2b0f51","subscription":"e2e-rate-iso-a-2b0f51","tenant":"e2e-shared-a-9cb33a","userId":"65987a6a-17e7-4633-a688-9620fe7d712e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\",\"requestedSubscription\":\"e2e-rate-iso-a-2b0f51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2b0f51","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2b0f51"}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"65987a6a-17e7-4633-a688-9620fe7d712e","keyName":"e2e-rate-a-2b0f51","selected_subscription":"e2e-rate-iso-a-2b0f51","selected_subscription_key":"ai-tenant-e2e-shared-a-9cb33a/e2e-rate-iso-a-2b0f51@ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2b0f51","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a19d395-8a77-45c5-8b2f-756085b1aa3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40008","PortSpecifier":{"PortValue":40008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e675a640-7251-4dd3-a9e4-cda721725b15","method":"POST","path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40008","PortSpecifier":{"PortValue":40008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368106,"nanos":784932907},"http":{"id":"e675a640-7251-4dd3-a9e4-cda721725b15","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-q07KSE44g7ekvAHU_1cfDH8Lh6efOXsv3SqZcto1z2r1mCahT22K01nrMMbD"}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-q07KSE44g7ekvAHU_1cfDH8Lh6efOXsv3SqZcto1z2r1mCahT22K01nrMMbD\"}"}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"65987a6a-17e7-4633-a688-9620fe7d712e","keyName":"e2e-rate-a-2b0f51","subscription":"e2e-rate-iso-a-2b0f51","tenant":"e2e-shared-a-9cb33a","userId":"65987a6a-17e7-4633-a688-9620fe7d712e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\",\"requestedSubscription\":\"e2e-rate-iso-a-2b0f51\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2b0f51","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2b0f51"}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"65987a6a-17e7-4633-a688-9620fe7d712e","keyName":"e2e-rate-a-2b0f51","selected_subscription":"e2e-rate-iso-a-2b0f51","selected_subscription_key":"ai-tenant-e2e-shared-a-9cb33a/e2e-rate-iso-a-2b0f51@ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2b0f51","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e675a640-7251-4dd3-a9e4-cda721725b15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51058","PortSpecifier":{"PortValue":51058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51058","PortSpecifier":{"PortValue":51058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368115,"nanos":481311876},"http":{"id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3473c1b0-1b73-4792-9ed8-8fb99a953b4f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9accabaa-e794-428a-bd08-3898cb913601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41446","PortSpecifier":{"PortValue":41446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9accabaa-e794-428a-bd08-3898cb913601","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9accabaa-e794-428a-bd08-3898cb913601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41446","PortSpecifier":{"PortValue":41446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368115,"nanos":521873096},"http":{"id":"9accabaa-e794-428a-bd08-3898cb913601","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9accabaa-e794-428a-bd08-3898cb913601","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9accabaa-e794-428a-bd08-3898cb913601","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"52e7d17e-0d8f-449f-85d4-e56824942111","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"]}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9accabaa-e794-428a-bd08-3898cb913601","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6eee29bfda4b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=69656434-4c73-4427-b04a-f159e0638096"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"52e7d17e-0d8f-449f-85d4-e56824942111","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9accabaa-e794-428a-bd08-3898cb913601","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9accabaa-e794-428a-bd08-3898cb913601","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9accabaa-e794-428a-bd08-3898cb913601","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/rate-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9accabaa-e794-428a-bd08-3898cb913601","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9accabaa-e794-428a-bd08-3898cb913601","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9accabaa-e794-428a-bd08-3898cb913601","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9accabaa-e794-428a-bd08-3898cb913601","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9accabaa-e794-428a-bd08-3898cb913601","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51074","PortSpecifier":{"PortValue":51074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"191bd6e3-342f-4315-a9af-92b26c0703c4","method":"POST","path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51074","PortSpecifier":{"PortValue":51074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368115,"nanos":560975269},"http":{"id":"191bd6e3-342f-4315-a9af-92b26c0703c4","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci\"}"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","subscription":"e2e-rate-iso-a-a8fa9b","tenant":"e2e-shared-a-9cb33a","userId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\",\"requestedSubscription\":\"e2e-rate-iso-a-a8fa9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8fa9b"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","selected_subscription":"e2e-rate-iso-a-a8fa9b","selected_subscription_key":"ai-tenant-e2e-shared-a-9cb33a/e2e-rate-iso-a-a8fa9b@ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"191bd6e3-342f-4315-a9af-92b26c0703c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51086","PortSpecifier":{"PortValue":51086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","method":"POST","path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51086","PortSpecifier":{"PortValue":51086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368116,"nanos":596256272},"http":{"id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci\"}"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","subscription":"e2e-rate-iso-a-a8fa9b","tenant":"e2e-shared-a-9cb33a","userId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\",\"requestedSubscription\":\"e2e-rate-iso-a-a8fa9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8fa9b"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","selected_subscription":"e2e-rate-iso-a-a8fa9b","selected_subscription_key":"ai-tenant-e2e-shared-a-9cb33a/e2e-rate-iso-a-a8fa9b@ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb65d3e3-dca0-43cd-8ba1-63a9ee081860","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51092","PortSpecifier":{"PortValue":51092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","method":"POST","path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51092","PortSpecifier":{"PortValue":51092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368117,"nanos":632551140},"http":{"id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci"}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci\"}"}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","subscription":"e2e-rate-iso-a-a8fa9b","tenant":"e2e-shared-a-9cb33a","userId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\",\"requestedSubscription\":\"e2e-rate-iso-a-a8fa9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8fa9b"}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","selected_subscription":"e2e-rate-iso-a-a8fa9b","selected_subscription_key":"ai-tenant-e2e-shared-a-9cb33a/e2e-rate-iso-a-a8fa9b@ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d032093-5c28-4e4f-8bac-1c2860a434fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51108","PortSpecifier":{"PortValue":51108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"583ec576-f60c-4456-8400-c86fcddd3d21","method":"POST","path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51108","PortSpecifier":{"PortValue":51108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368118,"nanos":668275301},"http":{"id":"583ec576-f60c-4456-8400-c86fcddd3d21","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci"}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci\"}"}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","subscription":"e2e-rate-iso-a-a8fa9b","tenant":"e2e-shared-a-9cb33a","userId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\",\"requestedSubscription\":\"e2e-rate-iso-a-a8fa9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8fa9b"}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","selected_subscription":"e2e-rate-iso-a-a8fa9b","selected_subscription_key":"ai-tenant-e2e-shared-a-9cb33a/e2e-rate-iso-a-a8fa9b@ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"583ec576-f60c-4456-8400-c86fcddd3d21","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51122","PortSpecifier":{"PortValue":51122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","method":"POST","path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51122","PortSpecifier":{"PortValue":51122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368119,"nanos":701878882},"http":{"id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci\"}"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","subscription":"e2e-rate-iso-a-a8fa9b","tenant":"e2e-shared-a-9cb33a","userId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\",\"requestedSubscription\":\"e2e-rate-iso-a-a8fa9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8fa9b"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","selected_subscription":"e2e-rate-iso-a-a8fa9b","selected_subscription_key":"ai-tenant-e2e-shared-a-9cb33a/e2e-rate-iso-a-a8fa9b@ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"657d445e-d665-4642-8e1a-78bfe0cc23d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51138","PortSpecifier":{"PortValue":51138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7c50859-d279-4c71-8b43-12b99e697da5","method":"POST","path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51138","PortSpecifier":{"PortValue":51138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368120,"nanos":736566746},"http":{"id":"e7c50859-d279-4c71-8b43-12b99e697da5","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci"}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci\"}"}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","subscription":"e2e-rate-iso-a-a8fa9b","tenant":"e2e-shared-a-9cb33a","userId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\",\"requestedSubscription\":\"e2e-rate-iso-a-a8fa9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8fa9b"}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","selected_subscription":"e2e-rate-iso-a-a8fa9b","selected_subscription_key":"ai-tenant-e2e-shared-a-9cb33a/e2e-rate-iso-a-a8fa9b@ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7c50859-d279-4c71-8b43-12b99e697da5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51148","PortSpecifier":{"PortValue":51148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d355917-4e62-47fb-85b4-2f229de3045e","method":"POST","path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51148","PortSpecifier":{"PortValue":51148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368121,"nanos":779476930},"http":{"id":"4d355917-4e62-47fb-85b4-2f229de3045e","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci"}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci\"}"}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","subscription":"e2e-rate-iso-a-a8fa9b","tenant":"e2e-shared-a-9cb33a","userId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\",\"requestedSubscription\":\"e2e-rate-iso-a-a8fa9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8fa9b"}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","selected_subscription":"e2e-rate-iso-a-a8fa9b","selected_subscription_key":"ai-tenant-e2e-shared-a-9cb33a/e2e-rate-iso-a-a8fa9b@ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d355917-4e62-47fb-85b4-2f229de3045e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51150","PortSpecifier":{"PortValue":51150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","method":"POST","path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51150","PortSpecifier":{"PortValue":51150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368122,"nanos":820097604},"http":{"id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci"}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci\"}"}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","subscription":"e2e-rate-iso-a-a8fa9b","tenant":"e2e-shared-a-9cb33a","userId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\",\"requestedSubscription\":\"e2e-rate-iso-a-a8fa9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8fa9b"}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","selected_subscription":"e2e-rate-iso-a-a8fa9b","selected_subscription_key":"ai-tenant-e2e-shared-a-9cb33a/e2e-rate-iso-a-a8fa9b@ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00b9da63-b6e0-9b36-876a-5d9886c5d65b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51158","PortSpecifier":{"PortValue":51158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","method":"POST","path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions","host":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51158","PortSpecifier":{"PortValue":51158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368123,"nanos":856800686},"http":{"id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","method":"POST","headers":{":authority":"e2e-shared-a-9cb33a.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11IL24kDjz72u1XKv_1y8SRiFcBgw8phzdWVRRZKhCerHI58OuHM8Jc5pQwci\"}"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","subscription":"e2e-rate-iso-a-a8fa9b","tenant":"e2e-shared-a-9cb33a","userId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\",\"requestedSubscription\":\"e2e-rate-iso-a-a8fa9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9cb33a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8fa9b"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4edeca08-6dca-44d5-97c2-fd676bf54a79","keyName":"e2e-rate-a-a8fa9b","selected_subscription":"e2e-rate-iso-a-a8fa9b","selected_subscription_key":"ai-tenant-e2e-shared-a-9cb33a/e2e-rate-iso-a-a8fa9b@ai-tenant-e2e-shared-a-9cb33a/rate-test-model-9cb33a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9cb33a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8fa9b","namespace":"ai-tenant-e2e-shared-a-9cb33a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9939ff0c-db1a-49f9-b965-f5507cbc3ca4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41460","PortSpecifier":{"PortValue":41460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7a34824-cf3a-42e7-adde-923d427063f3","method":"POST","path":"/ai-tenant-e2e-shared-b-97cecc/rate-test-model-97cecc/v1/completions","host":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41460","PortSpecifier":{"PortValue":41460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368123,"nanos":893826495},"http":{"id":"a7a34824-cf3a-42e7-adde-923d427063f3","method":"POST","headers":{":authority":"e2e-shared-b-97cecc.apps.747a9c9a-c404-4fdb-898b-6eee29bfda4b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-97cecc/rate-test-model-97cecc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NmtYZ68Msipq6Hnl_sRDaeb6AqbbKjXzTIS1zHEwfXknzuKysBc5ykP0JIJW"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-97cecc.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NmtYZ68Msipq6Hnl_sRDaeb6AqbbKjXzTIS1zHEwfXknzuKysBc5ykP0JIJW\"}"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-97cecc.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"20fb53ab-f607-4430-85df-d75222c92e55","keyName":"e2e-rate-b-a8fa9b","subscription":"e2e-rate-iso-b-a8fa9b","tenant":"e2e-shared-b-97cecc","userId":"20fb53ab-f607-4430-85df-d75222c92e55","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-97cecc.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-97cecc/rate-test-model-97cecc\",\"requestedSubscription\":\"e2e-rate-iso-b-a8fa9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-97cecc.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-97cecc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a8fa9b","namespace":"ai-tenant-e2e-shared-b-97cecc","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-97cecc/rate-test-model-97cecc\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a8fa9b"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"20fb53ab-f607-4430-85df-d75222c92e55","keyName":"e2e-rate-b-a8fa9b","selected_subscription":"e2e-rate-iso-b-a8fa9b","selected_subscription_key":"ai-tenant-e2e-shared-b-97cecc/e2e-rate-iso-b-a8fa9b@ai-tenant-e2e-shared-b-97cecc/rate-test-model-97cecc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-97cecc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a8fa9b","namespace":"ai-tenant-e2e-shared-b-97cecc","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7a34824-cf3a-42e7-adde-923d427063f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7576b8e021ad8679d24070b38c166fb50cbfc8eed3dc37baa547f94111efa4e"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18823b67df48e35f0352a611123b5b82a129bb3b5dbcfc2680839ed1bea31d2c"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a9a0a5c755219ce9f574b38e3cf1d011cb744f74e666d6f27a1201f31438c12"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/030017454e1eb3cec63d2a4beb8eed904879c5d632a5b79a11a4d4750675509b"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05e573b13e0a58e20c085b096d8508b6f81f555c8381abffb7c221bedf346584"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ae175f8434a9806ba270c54380b1d96ccff1d81060edb597e72185e0f542caa"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8a4cad10337d249d3c2c539738d04faab0c591316643f90e9bd2070b1e8ccf5"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/636509c29a92ccfc576a933ff87789bccd3eb922973e3e9e8a6243997a5858f4"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/324ab4615bb7091e71c7f76cb3a80e2abdb4414183839ed1b50357beaf47ab00"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feb4b59bbd1c1d90810ccb6b9c531898439f17ce5aad4a3c0f6abac1cc05c152"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8d46867a0435b3e21b519b6cfd6432c0541101cdf6eb19b4d75a15afa0d7521"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a16a5a3f10524b2059f06fc0407f746f52c65f1a842054d21d00fde3d28d8a04"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbf3f47262bc736ed821013de85813a9dbd3e272f144bcd476a282043a22f8a4"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad67f019afb803aa420daacb5a57f28f1bea52e934b07e12bdf146df6d99da63"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b7b847b92f71f794853daf17ef8da901a0a96c609402000b04f12a300a3a831"}
{"level":"info","ts":"2026-07-06T20:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30bd12c719adf4fb9d3cdfd58da0df058c07f11c6f3984d893d901b41a471c87"}
{"level":"info","ts":"2026-07-06T20:02:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a4f25c8b9bc4956fed944746a7dd308865dbc29ed34d4e5d6c6d692d7e63ae2"}
{"level":"info","ts":"2026-07-06T20:02:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23eed94162db143d2b7a3352b6f41604f816d0b0aa2c7c0ff98ef291acdc2703"}
{"level":"info","ts":"2026-07-06T20:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f931f041d6c66ee9e303f9cb6645fa8b3a8d3389e9081af001252306ea3eecc7"}
{"level":"info","ts":"2026-07-06T20:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e29c3b40f4247fd9973615773f89e8f19eaf780c5efa53dfeba7505f4783f4b"}