{"level":"info","ts":"2026-07-22T13:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/386136b95d428398df0e5e1576ffcbd4adbfb70587bd344510e06d625074c377"}
{"level":"debug","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"error","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"debug","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0"}
{"level":"error","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"740b0e742b5b02f4ddec4cebbf7347309b0a10fd45ba5d1d372163cec472d513","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"740b0e742b5b02f4ddec4cebbf7347309b0a10fd45ba5d1d372163cec472d513","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"740b0e742b5b02f4ddec4cebbf7347309b0a10fd45ba5d1d372163cec472d513","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"740b0e742b5b02f4ddec4cebbf7347309b0a10fd45ba5d1d372163cec472d513","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/740b0e742b5b02f4ddec4cebbf7347309b0a10fd45ba5d1d372163cec472d513"}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"740b0e742b5b02f4ddec4cebbf7347309b0a10fd45ba5d1d372163cec472d513","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["740b0e742b5b02f4ddec4cebbf7347309b0a10fd45ba5d1d372163cec472d513"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"740b0e742b5b02f4ddec4cebbf7347309b0a10fd45ba5d1d372163cec472d513","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/740b0e742b5b02f4ddec4cebbf7347309b0a10fd45ba5d1d372163cec472d513"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"740b0e742b5b02f4ddec4cebbf7347309b0a10fd45ba5d1d372163cec472d513","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b2d6b6df4ad5f3c6c1bdd8771b355aac0bfc20f46178bd44cdaef52fddc1970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b2d6b6df4ad5f3c6c1bdd8771b355aac0bfc20f46178bd44cdaef52fddc1970"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b2d6b6df4ad5f3c6c1bdd8771b355aac0bfc20f46178bd44cdaef52fddc1970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b2d6b6df4ad5f3c6c1bdd8771b355aac0bfc20f46178bd44cdaef52fddc1970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b2d6b6df4ad5f3c6c1bdd8771b355aac0bfc20f46178bd44cdaef52fddc1970"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f887f518df1747a053c18e6915bb0fc23a989d2445ff172187cc42f03669526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f887f518df1747a053c18e6915bb0fc23a989d2445ff172187cc42f03669526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f887f518df1747a053c18e6915bb0fc23a989d2445ff172187cc42f03669526"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b2d6b6df4ad5f3c6c1bdd8771b355aac0bfc20f46178bd44cdaef52fddc1970","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b2d6b6df4ad5f3c6c1bdd8771b355aac0bfc20f46178bd44cdaef52fddc1970"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b2d6b6df4ad5f3c6c1bdd8771b355aac0bfc20f46178bd44cdaef52fddc1970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f887f518df1747a053c18e6915bb0fc23a989d2445ff172187cc42f03669526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f887f518df1747a053c18e6915bb0fc23a989d2445ff172187cc42f03669526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f887f518df1747a053c18e6915bb0fc23a989d2445ff172187cc42f03669526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b2d6b6df4ad5f3c6c1bdd8771b355aac0bfc20f46178bd44cdaef52fddc1970","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f887f518df1747a053c18e6915bb0fc23a989d2445ff172187cc42f03669526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f"}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f887f518df1747a053c18e6915bb0fc23a989d2445ff172187cc42f03669526"}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b2d6b6df4ad5f3c6c1bdd8771b355aac0bfc20f46178bd44cdaef52fddc1970"}
{"level":"debug","ts":"2026-07-22T13:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab"}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ec1f6c5db4a6aefb365d867e74482fd816d1e5ea6a01aa90982324ed87474e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ec1f6c5db4a6aefb365d867e74482fd816d1e5ea6a01aa90982324ed87474e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ec1f6c5db4a6aefb365d867e74482fd816d1e5ea6a01aa90982324ed87474e"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72ec1f6c5db4a6aefb365d867e74482fd816d1e5ea6a01aa90982324ed87474e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72ec1f6c5db4a6aefb365d867e74482fd816d1e5ea6a01aa90982324ed87474e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72ec1f6c5db4a6aefb365d867e74482fd816d1e5ea6a01aa90982324ed87474e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72ec1f6c5db4a6aefb365d867e74482fd816d1e5ea6a01aa90982324ed87474e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72ec1f6c5db4a6aefb365d867e74482fd816d1e5ea6a01aa90982324ed87474e"}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b"}
{"level":"error","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0d6702e7efc7a39c9e7d291e9e42e1285dc965b86c29ea45b2028cfc43a3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0d6702e7efc7a39c9e7d291e9e42e1285dc965b86c29ea45b2028cfc43a3a8"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/077e4d8f643977addfbd7eaab39a68520c879eabe555673ba772a4ca407eeb7e"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cfeca2f706bad28582427da3ce55a732dd189ad0e7d72886704e2047847090c"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e21ef356225958e89008004fc231043186c39bed6a2f80a2a3865648d98bcd1d"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae670d620e2b797c484f0655c2c56238319c124d2220f79341f849801743cbbf"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0d6702e7efc7a39c9e7d291e9e42e1285dc965b86c29ea45b2028cfc43a3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"077e4d8f643977addfbd7eaab39a68520c879eabe555673ba772a4ca407eeb7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["077e4d8f643977addfbd7eaab39a68520c879eabe555673ba772a4ca407eeb7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0d6702e7efc7a39c9e7d291e9e42e1285dc965b86c29ea45b2028cfc43a3a8"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9090c2f77fc80a957be59a12187d42b59821302031db4b4000c86f4ebadb36e7"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"077e4d8f643977addfbd7eaab39a68520c879eabe555673ba772a4ca407eeb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cfeca2f706bad28582427da3ce55a732dd189ad0e7d72886704e2047847090c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cfeca2f706bad28582427da3ce55a732dd189ad0e7d72886704e2047847090c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff70b07250ca19e661a1a7889f9f054e575d94cc95c3bd52edc594ef2312daa5"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/077e4d8f643977addfbd7eaab39a68520c879eabe555673ba772a4ca407eeb7e"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010228bfe0953fe6532c0f6ad3937438be062048a4fdbffe775afa79151341bc"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/386136b95d428398df0e5e1576ffcbd4adbfb70587bd344510e06d625074c377"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cfeca2f706bad28582427da3ce55a732dd189ad0e7d72886704e2047847090c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e21ef356225958e89008004fc231043186c39bed6a2f80a2a3865648d98bcd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e21ef356225958e89008004fc231043186c39bed6a2f80a2a3865648d98bcd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d94d5d0e3e937de25c8215c12318c04372a833c1e7bd916f9320fadda70f91d0"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d57bde661b2b8ca9fd33b6b0879509da3d4bead38f04497d59aafa0fa700aa0"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cfeca2f706bad28582427da3ce55a732dd189ad0e7d72886704e2047847090c"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e21ef356225958e89008004fc231043186c39bed6a2f80a2a3865648d98bcd1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae670d620e2b797c484f0655c2c56238319c124d2220f79341f849801743cbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae670d620e2b797c484f0655c2c56238319c124d2220f79341f849801743cbbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/162e4efbf274c3cde10c92a92b148f471ca873072ca31b27f599c8c146c0b204"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e21ef356225958e89008004fc231043186c39bed6a2f80a2a3865648d98bcd1d"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae670d620e2b797c484f0655c2c56238319c124d2220f79341f849801743cbbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0d6702e7efc7a39c9e7d291e9e42e1285dc965b86c29ea45b2028cfc43a3a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0d6702e7efc7a39c9e7d291e9e42e1285dc965b86c29ea45b2028cfc43a3a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae670d620e2b797c484f0655c2c56238319c124d2220f79341f849801743cbbf"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0d6702e7efc7a39c9e7d291e9e42e1285dc965b86c29ea45b2028cfc43a3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9090c2f77fc80a957be59a12187d42b59821302031db4b4000c86f4ebadb36e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9090c2f77fc80a957be59a12187d42b59821302031db4b4000c86f4ebadb36e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0d6702e7efc7a39c9e7d291e9e42e1285dc965b86c29ea45b2028cfc43a3a8"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9090c2f77fc80a957be59a12187d42b59821302031db4b4000c86f4ebadb36e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff70b07250ca19e661a1a7889f9f054e575d94cc95c3bd52edc594ef2312daa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff70b07250ca19e661a1a7889f9f054e575d94cc95c3bd52edc594ef2312daa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9090c2f77fc80a957be59a12187d42b59821302031db4b4000c86f4ebadb36e7"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff70b07250ca19e661a1a7889f9f054e575d94cc95c3bd52edc594ef2312daa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"077e4d8f643977addfbd7eaab39a68520c879eabe555673ba772a4ca407eeb7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010228bfe0953fe6532c0f6ad3937438be062048a4fdbffe775afa79151341bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["010228bfe0953fe6532c0f6ad3937438be062048a4fdbffe775afa79151341bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff70b07250ca19e661a1a7889f9f054e575d94cc95c3bd52edc594ef2312daa5"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010228bfe0953fe6532c0f6ad3937438be062048a4fdbffe775afa79151341bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"386136b95d428398df0e5e1576ffcbd4adbfb70587bd344510e06d625074c377","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["386136b95d428398df0e5e1576ffcbd4adbfb70587bd344510e06d625074c377"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010228bfe0953fe6532c0f6ad3937438be062048a4fdbffe775afa79151341bc"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"386136b95d428398df0e5e1576ffcbd4adbfb70587bd344510e06d625074c377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d94d5d0e3e937de25c8215c12318c04372a833c1e7bd916f9320fadda70f91d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d94d5d0e3e937de25c8215c12318c04372a833c1e7bd916f9320fadda70f91d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/386136b95d428398df0e5e1576ffcbd4adbfb70587bd344510e06d625074c377"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d94d5d0e3e937de25c8215c12318c04372a833c1e7bd916f9320fadda70f91d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d57bde661b2b8ca9fd33b6b0879509da3d4bead38f04497d59aafa0fa700aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d57bde661b2b8ca9fd33b6b0879509da3d4bead38f04497d59aafa0fa700aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d94d5d0e3e937de25c8215c12318c04372a833c1e7bd916f9320fadda70f91d0"}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d57bde661b2b8ca9fd33b6b0879509da3d4bead38f04497d59aafa0fa700aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cfeca2f706bad28582427da3ce55a732dd189ad0e7d72886704e2047847090c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"162e4efbf274c3cde10c92a92b148f471ca873072ca31b27f599c8c146c0b204","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["162e4efbf274c3cde10c92a92b148f471ca873072ca31b27f599c8c146c0b204"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d57bde661b2b8ca9fd33b6b0879509da3d4bead38f04497d59aafa0fa700aa0"}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"162e4efbf274c3cde10c92a92b148f471ca873072ca31b27f599c8c146c0b204","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/162e4efbf274c3cde10c92a92b148f471ca873072ca31b27f599c8c146c0b204"}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e21ef356225958e89008004fc231043186c39bed6a2f80a2a3865648d98bcd1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae670d620e2b797c484f0655c2c56238319c124d2220f79341f849801743cbbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0d6702e7efc7a39c9e7d291e9e42e1285dc965b86c29ea45b2028cfc43a3a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9090c2f77fc80a957be59a12187d42b59821302031db4b4000c86f4ebadb36e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff70b07250ca19e661a1a7889f9f054e575d94cc95c3bd52edc594ef2312daa5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010228bfe0953fe6532c0f6ad3937438be062048a4fdbffe775afa79151341bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"386136b95d428398df0e5e1576ffcbd4adbfb70587bd344510e06d625074c377","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d94d5d0e3e937de25c8215c12318c04372a833c1e7bd916f9320fadda70f91d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d57bde661b2b8ca9fd33b6b0879509da3d4bead38f04497d59aafa0fa700aa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"162e4efbf274c3cde10c92a92b148f471ca873072ca31b27f599c8c146c0b204","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T13:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"}
{"level":"error","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T13:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c43d428-66d8-4ddf-ae17-2a13dad4f986","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32830","PortSpecifier":{"PortValue":32830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c43d428-66d8-4ddf-ae17-2a13dad4f986","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c43d428-66d8-4ddf-ae17-2a13dad4f986","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32830","PortSpecifier":{"PortValue":32830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784726735,"nanos":15042744},"http":{"id":"9c43d428-66d8-4ddf-ae17-2a13dad4f986","method":"POST","headers":{":authority":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c43d428-66d8-4ddf-ae17-2a13dad4f986","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c43d428-66d8-4ddf-ae17-2a13dad4f986","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd9874ec-267f-4e3b-b626-621b56672b3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3c296f32-89e0-4dd5-bd53-81dad59f6237"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/865a8e3403ca"]}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c43d428-66d8-4ddf-ae17-2a13dad4f986","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/865a8e3403ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3c296f32-89e0-4dd5-bd53-81dad59f6237"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd9874ec-267f-4e3b-b626-621b56672b3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e21ef356225958e89008004fc231043186c39bed6a2f80a2a3865648d98bcd1d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c43d428-66d8-4ddf-ae17-2a13dad4f986","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c43d428-66d8-4ddf-ae17-2a13dad4f986","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c43d428-66d8-4ddf-ae17-2a13dad4f986","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c43d428-66d8-4ddf-ae17-2a13dad4f986","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c43d428-66d8-4ddf-ae17-2a13dad4f986","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5883cd29-46ab-48f0-87d9-73075f94d4c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58304","PortSpecifier":{"PortValue":58304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5883cd29-46ab-48f0-87d9-73075f94d4c4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ffc1de.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5883cd29-46ab-48f0-87d9-73075f94d4c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58304","PortSpecifier":{"PortValue":58304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784726735,"nanos":57458249},"http":{"id":"5883cd29-46ab-48f0-87d9-73075f94d4c4","method":"POST","headers":{":authority":"e2e-shared-b-ffc1de.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5883cd29-46ab-48f0-87d9-73075f94d4c4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5883cd29-46ab-48f0-87d9-73075f94d4c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd9874ec-267f-4e3b-b626-621b56672b3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3c296f32-89e0-4dd5-bd53-81dad59f6237"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/865a8e3403ca"]}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5883cd29-46ab-48f0-87d9-73075f94d4c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/865a8e3403ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3c296f32-89e0-4dd5-bd53-81dad59f6237"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd9874ec-267f-4e3b-b626-621b56672b3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae670d620e2b797c484f0655c2c56238319c124d2220f79341f849801743cbbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ffc1de.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5883cd29-46ab-48f0-87d9-73075f94d4c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5883cd29-46ab-48f0-87d9-73075f94d4c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5883cd29-46ab-48f0-87d9-73075f94d4c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5883cd29-46ab-48f0-87d9-73075f94d4c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5883cd29-46ab-48f0-87d9-73075f94d4c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a267428-80cf-482f-8f30-419c5b40457f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32842","PortSpecifier":{"PortValue":32842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a267428-80cf-482f-8f30-419c5b40457f","method":"POST","path":"/ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327/v1/completions","host":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a267428-80cf-482f-8f30-419c5b40457f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32842","PortSpecifier":{"PortValue":32842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784726735,"nanos":98971592},"http":{"id":"3a267428-80cf-482f-8f30-419c5b40457f","method":"POST","headers":{":authority":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8x61avjFMAVOaPIz_6uwqM8WHFZxyiZwuWICYfvKu6RZpZdRSxtd9tIFjun4"}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8x61avjFMAVOaPIz_6uwqM8WHFZxyiZwuWICYfvKu6RZpZdRSxtd9tIFjun4\"}"}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d4c4e2fc-9d77-4f7c-9463-2f84fc6bbb87","keyName":"e2e-rate-a-c90720","subscription":"e2e-rate-iso-a-c90720","tenant":"e2e-shared-a-d24327","userId":"d4c4e2fc-9d77-4f7c-9463-2f84fc6bbb87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327\",\"requestedSubscription\":\"e2e-rate-iso-a-c90720\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24327","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c90720","namespace":"ai-tenant-e2e-shared-a-d24327","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327"}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a267428-80cf-482f-8f30-419c5b40457f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24327/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c90720"}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a267428-80cf-482f-8f30-419c5b40457f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d4c4e2fc-9d77-4f7c-9463-2f84fc6bbb87","keyName":"e2e-rate-a-c90720","selected_subscription":"e2e-rate-iso-a-c90720","selected_subscription_key":"ai-tenant-e2e-shared-a-d24327/e2e-rate-iso-a-c90720@ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24327","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c90720","namespace":"ai-tenant-e2e-shared-a-d24327","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a267428-80cf-482f-8f30-419c5b40457f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:25:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a267428-80cf-482f-8f30-419c5b40457f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32852","PortSpecifier":{"PortValue":32852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","method":"POST","path":"/ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327/v1/completions","host":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32852","PortSpecifier":{"PortValue":32852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784726736,"nanos":177128754},"http":{"id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","method":"POST","headers":{":authority":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8x61avjFMAVOaPIz_6uwqM8WHFZxyiZwuWICYfvKu6RZpZdRSxtd9tIFjun4"}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8x61avjFMAVOaPIz_6uwqM8WHFZxyiZwuWICYfvKu6RZpZdRSxtd9tIFjun4\"}"}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d4c4e2fc-9d77-4f7c-9463-2f84fc6bbb87","keyName":"e2e-rate-a-c90720","subscription":"e2e-rate-iso-a-c90720","tenant":"e2e-shared-a-d24327","userId":"d4c4e2fc-9d77-4f7c-9463-2f84fc6bbb87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327\",\"requestedSubscription\":\"e2e-rate-iso-a-c90720\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24327","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c90720","namespace":"ai-tenant-e2e-shared-a-d24327","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327"}}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24327/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c90720"}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d4c4e2fc-9d77-4f7c-9463-2f84fc6bbb87","keyName":"e2e-rate-a-c90720","selected_subscription":"e2e-rate-iso-a-c90720","selected_subscription_key":"ai-tenant-e2e-shared-a-d24327/e2e-rate-iso-a-c90720@ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24327","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c90720","namespace":"ai-tenant-e2e-shared-a-d24327","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9a5285b-73f3-4dc0-a83b-eb424c9be78c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32854","PortSpecifier":{"PortValue":32854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","method":"POST","path":"/ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327/v1/completions","host":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32854","PortSpecifier":{"PortValue":32854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784726737,"nanos":222509959},"http":{"id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","method":"POST","headers":{":authority":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8x61avjFMAVOaPIz_6uwqM8WHFZxyiZwuWICYfvKu6RZpZdRSxtd9tIFjun4"}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8x61avjFMAVOaPIz_6uwqM8WHFZxyiZwuWICYfvKu6RZpZdRSxtd9tIFjun4\"}"}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d4c4e2fc-9d77-4f7c-9463-2f84fc6bbb87","keyName":"e2e-rate-a-c90720","subscription":"e2e-rate-iso-a-c90720","tenant":"e2e-shared-a-d24327","userId":"d4c4e2fc-9d77-4f7c-9463-2f84fc6bbb87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327\",\"requestedSubscription\":\"e2e-rate-iso-a-c90720\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24327","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c90720","namespace":"ai-tenant-e2e-shared-a-d24327","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327"}}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24327/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c90720"}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d4c4e2fc-9d77-4f7c-9463-2f84fc6bbb87","keyName":"e2e-rate-a-c90720","selected_subscription":"e2e-rate-iso-a-c90720","selected_subscription_key":"ai-tenant-e2e-shared-a-d24327/e2e-rate-iso-a-c90720@ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24327","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c90720","namespace":"ai-tenant-e2e-shared-a-d24327","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:25:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a2c311a-0efe-4095-9b3b-18dee8c448ef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c6f04e4-da1d-4084-98f8-dd4356ae6ece","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38804","PortSpecifier":{"PortValue":38804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c6f04e4-da1d-4084-98f8-dd4356ae6ece","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c6f04e4-da1d-4084-98f8-dd4356ae6ece","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38804","PortSpecifier":{"PortValue":38804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784726750,"nanos":292125265},"http":{"id":"8c6f04e4-da1d-4084-98f8-dd4356ae6ece","method":"POST","headers":{":authority":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c6f04e4-da1d-4084-98f8-dd4356ae6ece","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c6f04e4-da1d-4084-98f8-dd4356ae6ece","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd9874ec-267f-4e3b-b626-621b56672b3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3c296f32-89e0-4dd5-bd53-81dad59f6237"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/865a8e3403ca"]}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c6f04e4-da1d-4084-98f8-dd4356ae6ece","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/865a8e3403ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3c296f32-89e0-4dd5-bd53-81dad59f6237"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd9874ec-267f-4e3b-b626-621b56672b3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e21ef356225958e89008004fc231043186c39bed6a2f80a2a3865648d98bcd1d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c6f04e4-da1d-4084-98f8-dd4356ae6ece","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c6f04e4-da1d-4084-98f8-dd4356ae6ece","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c6f04e4-da1d-4084-98f8-dd4356ae6ece","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c6f04e4-da1d-4084-98f8-dd4356ae6ece","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c6f04e4-da1d-4084-98f8-dd4356ae6ece","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bede422-8bd3-445a-9acd-a0f957bfa483","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45844","PortSpecifier":{"PortValue":45844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bede422-8bd3-445a-9acd-a0f957bfa483","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ffc1de.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bede422-8bd3-445a-9acd-a0f957bfa483","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45844","PortSpecifier":{"PortValue":45844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784726750,"nanos":334550811},"http":{"id":"8bede422-8bd3-445a-9acd-a0f957bfa483","method":"POST","headers":{":authority":"e2e-shared-b-ffc1de.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8bede422-8bd3-445a-9acd-a0f957bfa483","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bede422-8bd3-445a-9acd-a0f957bfa483","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bd9874ec-267f-4e3b-b626-621b56672b3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3c296f32-89e0-4dd5-bd53-81dad59f6237"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/865a8e3403ca"]}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bede422-8bd3-445a-9acd-a0f957bfa483","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/865a8e3403ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3c296f32-89e0-4dd5-bd53-81dad59f6237"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bd9874ec-267f-4e3b-b626-621b56672b3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae670d620e2b797c484f0655c2c56238319c124d2220f79341f849801743cbbf"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ffc1de.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bede422-8bd3-445a-9acd-a0f957bfa483","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bede422-8bd3-445a-9acd-a0f957bfa483","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bede422-8bd3-445a-9acd-a0f957bfa483","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bede422-8bd3-445a-9acd-a0f957bfa483","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bede422-8bd3-445a-9acd-a0f957bfa483","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38816","PortSpecifier":{"PortValue":38816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","method":"POST","path":"/ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327/v1/completions","host":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38816","PortSpecifier":{"PortValue":38816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784726750,"nanos":374308107},"http":{"id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","method":"POST","headers":{":authority":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ImnyadEGGhjK2Kj4_21WyDX6Lc3RMwUbUAJI7krlBGwk4OwVNcUMHRJsu9SV"}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ImnyadEGGhjK2Kj4_21WyDX6Lc3RMwUbUAJI7krlBGwk4OwVNcUMHRJsu9SV\"}"}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c1da5733-4387-466f-b20d-f75d2feb9868","keyName":"e2e-rate-a-4ea7cc","subscription":"e2e-rate-iso-a-4ea7cc","tenant":"e2e-shared-a-d24327","userId":"c1da5733-4387-466f-b20d-f75d2feb9868","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327\",\"requestedSubscription\":\"e2e-rate-iso-a-4ea7cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24327","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ea7cc","namespace":"ai-tenant-e2e-shared-a-d24327","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327"}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24327/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ea7cc"}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c1da5733-4387-466f-b20d-f75d2feb9868","keyName":"e2e-rate-a-4ea7cc","selected_subscription":"e2e-rate-iso-a-4ea7cc","selected_subscription_key":"ai-tenant-e2e-shared-a-d24327/e2e-rate-iso-a-4ea7cc@ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24327","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ea7cc","namespace":"ai-tenant-e2e-shared-a-d24327","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:25:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e963a9f8-87e6-4c8b-8549-0916ad21090c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38822","PortSpecifier":{"PortValue":38822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","method":"POST","path":"/ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327/v1/completions","host":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38822","PortSpecifier":{"PortValue":38822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784726751,"nanos":417215570},"http":{"id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","method":"POST","headers":{":authority":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ImnyadEGGhjK2Kj4_21WyDX6Lc3RMwUbUAJI7krlBGwk4OwVNcUMHRJsu9SV"}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ImnyadEGGhjK2Kj4_21WyDX6Lc3RMwUbUAJI7krlBGwk4OwVNcUMHRJsu9SV\"}"}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c1da5733-4387-466f-b20d-f75d2feb9868","keyName":"e2e-rate-a-4ea7cc","subscription":"e2e-rate-iso-a-4ea7cc","tenant":"e2e-shared-a-d24327","userId":"c1da5733-4387-466f-b20d-f75d2feb9868","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327\",\"requestedSubscription\":\"e2e-rate-iso-a-4ea7cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24327","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ea7cc","namespace":"ai-tenant-e2e-shared-a-d24327","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327"}}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24327/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ea7cc"}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c1da5733-4387-466f-b20d-f75d2feb9868","keyName":"e2e-rate-a-4ea7cc","selected_subscription":"e2e-rate-iso-a-4ea7cc","selected_subscription_key":"ai-tenant-e2e-shared-a-d24327/e2e-rate-iso-a-4ea7cc@ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24327","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ea7cc","namespace":"ai-tenant-e2e-shared-a-d24327","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:25:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74fc8a27-577f-465e-ab17-c00e5e518c2d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38832","PortSpecifier":{"PortValue":38832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","method":"POST","path":"/ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327/v1/completions","host":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38832","PortSpecifier":{"PortValue":38832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784726752,"nanos":457276240},"http":{"id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","method":"POST","headers":{":authority":"e2e-shared-a-d24327.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ImnyadEGGhjK2Kj4_21WyDX6Lc3RMwUbUAJI7krlBGwk4OwVNcUMHRJsu9SV"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ImnyadEGGhjK2Kj4_21WyDX6Lc3RMwUbUAJI7krlBGwk4OwVNcUMHRJsu9SV\"}"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c1da5733-4387-466f-b20d-f75d2feb9868","keyName":"e2e-rate-a-4ea7cc","subscription":"e2e-rate-iso-a-4ea7cc","tenant":"e2e-shared-a-d24327","userId":"c1da5733-4387-466f-b20d-f75d2feb9868","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327\",\"requestedSubscription\":\"e2e-rate-iso-a-4ea7cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d24327.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d24327","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ea7cc","namespace":"ai-tenant-e2e-shared-a-d24327","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327"}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d24327/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ea7cc"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c1da5733-4387-466f-b20d-f75d2feb9868","keyName":"e2e-rate-a-4ea7cc","selected_subscription":"e2e-rate-iso-a-4ea7cc","selected_subscription_key":"ai-tenant-e2e-shared-a-d24327/e2e-rate-iso-a-4ea7cc@ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d24327","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ea7cc","namespace":"ai-tenant-e2e-shared-a-d24327","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d24327/rate-test-model-d24327"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bc6f79b-1293-489a-a8bc-50b1012b758b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45850","PortSpecifier":{"PortValue":45850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","method":"POST","path":"/ai-tenant-e2e-shared-b-ffc1de/rate-test-model-ffc1de/v1/completions","host":"e2e-shared-b-ffc1de.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45850","PortSpecifier":{"PortValue":45850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784726752,"nanos":493604969},"http":{"id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","method":"POST","headers":{":authority":"e2e-shared-b-ffc1de.apps.b35904ab-7302-4cd3-a581-865a8e3403ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ffc1de/rate-test-model-ffc1de/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KT3GgICYE8Yzqh9c_YteY3LA2KALSaUK5uhoVXliaQRJmlmgYiphSoAQpfqO"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ffc1de.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KT3GgICYE8Yzqh9c_YteY3LA2KALSaUK5uhoVXliaQRJmlmgYiphSoAQpfqO\"}"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ffc1de.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a2a320f-8e02-4238-ac90-04b7c49232cb","keyName":"e2e-rate-b-4ea7cc","subscription":"e2e-rate-iso-b-4ea7cc","tenant":"e2e-shared-b-ffc1de","userId":"1a2a320f-8e02-4238-ac90-04b7c49232cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ffc1de.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ffc1de/rate-test-model-ffc1de\",\"requestedSubscription\":\"e2e-rate-iso-b-4ea7cc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ffc1de.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ffc1de","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4ea7cc","namespace":"ai-tenant-e2e-shared-b-ffc1de","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-ffc1de/rate-test-model-ffc1de"}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ffc1de/rate-test-model-ffc1de\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ffc1de/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4ea7cc"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1a2a320f-8e02-4238-ac90-04b7c49232cb","keyName":"e2e-rate-b-4ea7cc","selected_subscription":"e2e-rate-iso-b-4ea7cc","selected_subscription_key":"ai-tenant-e2e-shared-b-ffc1de/e2e-rate-iso-b-4ea7cc@ai-tenant-e2e-shared-b-ffc1de/rate-test-model-ffc1de","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ffc1de","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4ea7cc","namespace":"ai-tenant-e2e-shared-b-ffc1de","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-ffc1de/rate-test-model-ffc1de"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T13:25:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cf91a9f-e858-42eb-a1d1-169e3230e20a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b2d6b6df4ad5f3c6c1bdd8771b355aac0bfc20f46178bd44cdaef52fddc1970"}
{"level":"info","ts":"2026-07-22T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff70b07250ca19e661a1a7889f9f054e575d94cc95c3bd52edc594ef2312daa5"}
{"level":"info","ts":"2026-07-22T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57bbd0c0c2f1dc796fa74976d74302932f3e209edf0e2f201e62c1b25962c17b"}
{"level":"info","ts":"2026-07-22T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/162e4efbf274c3cde10c92a92b148f471ca873072ca31b27f599c8c146c0b204"}
{"level":"info","ts":"2026-07-22T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44f0cac11776c04377a881a5d8e2b077d2cbfb5111b10ff9418f08a520c533b0"}
{"level":"info","ts":"2026-07-22T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95dc06bf883fd34de06f462bd5183bda4825fbf8938334216524470b9cd8d9ab"}
{"level":"info","ts":"2026-07-22T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/386136b95d428398df0e5e1576ffcbd4adbfb70587bd344510e06d625074c377"}
{"level":"info","ts":"2026-07-22T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cfeca2f706bad28582427da3ce55a732dd189ad0e7d72886704e2047847090c"}
{"level":"info","ts":"2026-07-22T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e21ef356225958e89008004fc231043186c39bed6a2f80a2a3865648d98bcd1d"}
{"level":"info","ts":"2026-07-22T13:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e0d6702e7efc7a39c9e7d291e9e42e1285dc965b86c29ea45b2028cfc43a3a8"}
{"level":"info","ts":"2026-07-22T13:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d94d5d0e3e937de25c8215c12318c04372a833c1e7bd916f9320fadda70f91d0"}
{"level":"info","ts":"2026-07-22T13:25:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d57bde661b2b8ca9fd33b6b0879509da3d4bead38f04497d59aafa0fa700aa0"}
{"level":"info","ts":"2026-07-22T13:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f887f518df1747a053c18e6915bb0fc23a989d2445ff172187cc42f03669526"}
{"level":"info","ts":"2026-07-22T13:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23ef50e91b22ae93234d664aa76cdd4246606fcbfd03ff7bafc41db1421d9a69"}
{"level":"info","ts":"2026-07-22T13:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/247d0bfbe779e9fe9400f408fbb16fda7bfa86bd53e49864c332b304ced85cfc"}
{"level":"info","ts":"2026-07-22T13:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e3caa7a41f35136335fcbdd899af098190f533383bee671dc098539cd7d7b56"}
{"level":"info","ts":"2026-07-22T13:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e93d0d89caa91dc60992e53367b9216f1bbf5d5c323a40fb80c58a6b74ac63f"}
{"level":"info","ts":"2026-07-22T13:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae670d620e2b797c484f0655c2c56238319c124d2220f79341f849801743cbbf"}
{"level":"info","ts":"2026-07-22T13:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4bbb9a18b8a711d9d9b37689bb0075a3266034fa39243db1d6990061afab8dd"}
{"level":"info","ts":"2026-07-22T13:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/010228bfe0953fe6532c0f6ad3937438be062048a4fdbffe775afa79151341bc"}
{"level":"info","ts":"2026-07-22T13:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/077e4d8f643977addfbd7eaab39a68520c879eabe555673ba772a4ca407eeb7e"}
{"level":"info","ts":"2026-07-22T13:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/740b0e742b5b02f4ddec4cebbf7347309b0a10fd45ba5d1d372163cec472d513"}
{"level":"info","ts":"2026-07-22T13:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9090c2f77fc80a957be59a12187d42b59821302031db4b4000c86f4ebadb36e7"}
{"level":"info","ts":"2026-07-22T13:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72ec1f6c5db4a6aefb365d867e74482fd816d1e5ea6a01aa90982324ed87474e"}